Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| mail(RubyGems) | 0 | 2.4.4 | N/A |
CVSS Metrics
