CVE-2014-4994

lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to…

published January 10, 2018

CVSS
—
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00477 · 39.9th percentile
Published
2018-01-10T18:00Z
EPSS history
Timeline
  • 10 JAN 18:00Z
    lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to…
    cvelistv5