CVE-2012-2139

Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read…

published July 18, 2012

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04923 · 92.1th percentile
Published
2012-07-18T18:00Z
EPSS history
Timeline
  • 18 JUL 18:00Z
    Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read…
    cvelistv5