cve/2016/CVE-2016-10173.md
2024-05-26 14:27:05 +02:00

674 B

CVE-2016-10173

Description

Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.

POC

Reference

Github