Vulnerabilities

TI-2019-12597 CVE-2019-16892 · GHSA-5m2v-hc64-56h6

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry…

LOW 28

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01581 Published 2019-09-25 Fixed in 1.3.0 CWE-400

TI-2018-15941 CVE-2018-1000544 · GHSA-vqcq-mrmw-mcmg

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal…

MEDIUM 49

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04339 Published 2018-06-26 Partial fix · 1.2.2 CWE-434

TI-2017-03864 CVE-2017-5946 · GHSA-gcqq-w6gr-h9j9

The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory…

MEDIUM 48

The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03441 Published 2017-02-27 Partial fix · 1.2.1 CWE-22

Vulnerabilities

Filters

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry…

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal…

The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory…