GHSA-gcqq-w6gr-h9j9

    Dashboard / Vulnerabilities / GHSA-gcqq-w6gr-h9j9

    GHSA-gcqq-w6gr-h9j9

    Published: 24 Oct 2017Last Modified: 16 Feb 2024
    Aliases:
    CVE-2017-5946

    Summary: Directory traversal vulnerability in RubyZip

    Details: The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses `../` pathname substrings to write arbitrary files to the filesystem.

    References: https://nvd.nist.gov/vuln/detail/CVE-2017-5946, https://github.com/rubyzip/rubyzip/issues/315, https://github.com/rubyzip/rubyzip/commit/ce4208fdecc2ad079b05d3c49d70fe6ed1d07016, https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubyzip/CVE-2017-5946.yml, https://github.com/rubyzip/rubyzip, https://github.com/rubyzip/rubyzip/releases, https://web.archive.org/web/20200227185727/http://www.securityfocus.com/bid/96445, http://www.debian.org/security/2017/dsa-3801

    Affected packages

    Package

    Name: rubyzip

    Purl: pkg:gem/rubyzip

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.2.1

    Affected versions

    0.5.11
    0.5.12
    0.5.7
    0.5.8
    0.5.9

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High