| Package | Affected versions | Patched versions |
|---|---|---|
| open-uri-cached | ≤ 1.0.0 | |
| open-uri-cached | = 0.0.5 |
The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a metafile is created.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free