Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| archive-tar-minitar(RubyGems) | 0 | 0.5.2 | N/A |
| minitar(RubyGems) | 0 | 0.6 | N/A |
CVSS Metrics
