CVE-2017-17042

CVE-2017-17042

lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.

CVE-2017-17042

lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.

CVE-2017-17042

lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not ...

openSUSE-SU-2018:1908-1

Security update for rubygem-yard

SUSE-SU-2018:1890-1

Security update for rubygem-yard