Arbitrary file read vulnerability in yard server

2017-12-2100:47:25

Google

osv.dev

0.002 Low

EPSS

Percentile

51.9%

JSON

lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.

CPENameOperatorVersion
yardeq0.9.4
yardeq0.8.7.3
yardeq0.5.8
yardeq0.5.5
yardeq0.5.7
yardeq0.5.0
yardeq0.8.1
yardeq0.5.4
yardeq0.9.5
yardeq0.8.5

Name	Operator	Version
yard	eq	0.9.4
yard	eq	0.8.7.3
yard	eq	0.5.8
yard	eq	0.5.5
yard	eq	0.5.7
yard	eq	0.5.0
yard	eq	0.8.1
yard	eq	0.5.4
yard	eq	0.9.5
yard	eq	0.8.5

Rows per page:

1-10 of 651

References

github.com/advisories/GHSA-gj4p-3wh3-2rmf

github.com/lsegal/yard

github.com/lsegal/yard/commit/b0217b3e30dc53d057b1682506333335975e62b4

github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2017-17042.yml

nvd.nist.gov/vuln/detail/CVE-2017-17042

0.002 Low

EPSS

Percentile

51.9%

JSON

Related for OSV:GHSA-GJ4P-3WH3-2RMF