lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames.
CVSS 3.0MEDIUM 5.5·Local·Low privileges·No interaction·EPSS 0.00477·Published 2018-01-10·Fixed in 2.0.0CWE-20