CVE-2012-4522

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in…

published November 24, 2012

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02204 · 82.3th percentile
Published
2012-11-24T20:00Z
EPSS history
Timeline
  • 24 NOV 20:00Z
    The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in…
    cvelistv5