Contents

--- 
gem: ruby_parser
cve: 2013-0162
osvdb: 90561
url: https://nvd.nist.gov/vuln/detail/CVE-2013-0162
title: RubyGems ruby_parser (RP) Temporary File Symlink Arbitrary File Overwrite
date: 2013-02-21
description: RubyGems ruby_parser (RP) contains a flaw as rubygem-ruby_parser creates temporary files insecurely. It is possible for a local attacker to use a symlink attack to cause the program to unexpectedly overwrite an arbitrary file.
cvss_v2: 2.1
patched_versions: 
  - ">= 3.1.2"

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/ruby_parser/CVE-2013-0162.yml