CVE-2012-2139 rubygem-mail: directory traversal
Published: March 14, 2012
SECURITY IDENTIFIERS
- CVE: CVE-2012-2139 (NVD)
- GHSA: GHSA-cj92-c4fj-w9c5
- OSVDB: OSVDB-81631
GEM
SEVERITY
CVSS v2.0: 5.0 (Medium)
PATCHED VERSIONS
>= 2.4.4
DESCRIPTION
Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.