What is GHSA-gj4p-3wh3-2rmf?

GHSA-gj4p-3wh3-2rmf is a security advisory published by GitHub Security Advisories with High severity. Arbitrary file read vulnerability in yard server

Which CVE IDs does GHSA-gj4p-3wh3-2rmf cover?

GHSA-gj4p-3wh3-2rmf covers the following CVE IDs: CVE-2017-17042. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gj4p-3wh3-2rmf?

GHSA-gj4p-3wh3-2rmf has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-gj4p-3wh3-2rmf?

GHSA-gj4p-3wh3-2rmf affects 1 product, including: rubygems/yard:\u003c 0.9.11.

GHSA-gj4p-3wh3-2rmfHighCVSS 7.5

Arbitrary file read vulnerability in yard server

Vendor

GitHub Security Advisories

Published

December 21, 2017

Last Modified

July 5, 2023

🔗 CVE IDs covered (1)

CVE-2017-17042 →

📋 Description

lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.

🎯 Affected products1

rubygems/yard:< 0.9.11

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-17042
https://github.com/lsegal/yard/commit/b0217b3e30dc53d057b1682506333335975e62b4
https://github.com/advisories/GHSA-gj4p-3wh3-2rmf
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2017-17042.yml