CVE-2019-15845

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions

published November 26, 2019

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03289 · 88.4th percentile
Published
2019-11-26T16:45Z
EPSS history
Timeline
  • 26 NOV 16:45Z
    Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions
    cvelistv5