Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Rubocop Project records in CISA KEVNo Rubocop Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 16
RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.
CVSS 3.0LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00409 · Published 2017-05-02 · Fixed in 0.49.0 CWE-668
Open these records in search →