CVE-2021-28966: ruby-lang ruby Path Traversal
CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2021-28966GHSA-46f2-3v63-3xrpBIT-ruby-2021-28966BIT-ruby-min-2021-28966
Published 27-07-2021Last modified 03-08-2024
Vulnerability summary
CVE-2021-28966 is a high (CVSS 7.5) Path Traversal vulnerability in ruby-lang ruby. EPSS estimates a 58.04% chance of exploitation in the next 30 days, higher than 99% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.5/10
010
High · v3.1 (NVD)EPSS score
58.04%
0%100%
Critical · +0.91 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 27-07-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.
CVSS metrics
4 scores · 3 sources · 2 versionsHigh 7.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NSourcesAll 3 agree
- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · RubygemsEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Medium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:P/A:NSourcesSingle source
EPSS trend
Probability
58.04%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.91 pp
From 57.13% on 19-09-2026
19-09-202619-10-2026
EPSS score58.04%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (hackerone.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Alpine1 product
- ruby≥ 3.0.0, < 2.5.9-r0 | ≥ 3.0.0, < 2.6.7-r0 | ≥ 3.0.0, < 2.7.3-r0
Ruby-lang1 product
- ruby< 2.7.3 | ≥ 3.0.0, < 3.0.1
RubyGems1 product
- tmpdir< 0.1.2
3 vendors · 3 products
References
11 links
- github.com/ruby/tmpdirPACKAGE