Количество 7
Количество 7
CVE-2017-17042
lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.
CVE-2017-17042
lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.
CVE-2017-17042
lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.
CVE-2017-17042
lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not ...
openSUSE-SU-2018:1908-1
Security update for rubygem-yard
SUSE-SU-2018:1890-1
Security update for rubygem-yard
GHSA-gj4p-3wh3-2rmf
Arbitrary file read vulnerability in yard server
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-17042 lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files. | CVSS3: 7.5 | 0% Низкий | около 8 лет назад |
 | CVE-2017-17042 lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files. | CVSS3: 7.5 | 0% Низкий | около 8 лет назад |
 | CVE-2017-17042 lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files. | CVSS3: 7.5 | 0% Низкий | около 8 лет назад |
| CVE-2017-17042 lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not ... | CVSS3: 7.5 | 0% Низкий | около 8 лет назад |
 | openSUSE-SU-2018:1908-1 Security update for rubygem-yard | 0% Низкий | больше 7 лет назад | |
| SUSE-SU-2018:1890-1 Security update for rubygem-yard | 0% Низкий | больше 7 лет назад | |
| GHSA-gj4p-3wh3-2rmf Arbitrary file read vulnerability in yard server | CVSS3: 7.5 | 0% Низкий | около 8 лет назад |
Уязвимостей на страницу