Description
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.
Remediation
References
Related Vulnerabilities
MySQL CVE-2019-2800 Vulnerability (CVE-2019-2800)
WordPress Plugin MailArchiver Cross-Site Scripting (2.10.1)
TYPO3 Improper Input Validation Vulnerability (CVE-2011-4902)
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-14677)
WordPress MU 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability (1.0 - 2.6)