Posted by nagachika on 14 Dec 2017. There is a command injection vulnerability in Net::FTP bundled with Ruby. This vulnerability has been assigned the CVE identifier CVE-2017-17405. Details. Net::FTP#get , getbinaryfile , gettextfile , put , putbinaryfile , and puttextfile use Kernel#open to open a local ...
from Google Alert - vulnerability http://ift.tt/2AqhjBu
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment