RubyGems Improper Input Validation Vulnerability - CVE-2017-0901 - Vulnerability Database

RubyGems Improper Input Validation Vulnerability - CVE-2017-0901

High

Reference: CVE-2017-0901

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-0901

Title: RubyGems Improper Input Validation Vulnerability

Overview:

RubyGems version 2.6.12 and earlier fails to validate specification names allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.