Description
Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. (dot dot) in the prefix argument.
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-14776 Vulnerability (CVE-2020-14776)
WordPress Plugin About Author Cross-Site Scripting (1.3.9)
Apache version older than 1.3.28
Vanilla Forums Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2018-15833)
WordPress Plugin WP Mobile Detector Multiple Vulnerabilities (3.8)