ryan davis vulnerabilities

Products

• ruby parser 1

Latest ryan davis CVEs

Newest publication first

1. CVE-2013-0162 ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name

   Published 2013-03-01

   Low·CVSS 2.1 EPSS 0.37% PoC

   The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.