Rubyzip_project Rubyzip
3 CVEs affecting Rubyzip_project Rubyzip. Latest disclosed: 2019-09-25. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000544 | Critical | 9.8 | 2018-06-26 | rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to t… |
CVE-2017-5946 | Critical | 9.8 | 2017-02-27 | The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker… |
CVE-2019-16892 | Medium | 5.5 | 2019-09-25 | In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allo… |