← Back

Gyazo

gyazo

Vendor: Gyazo Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-4994
1Gyazo Project
1Gyazo
Nov 21, 2024
Jan 10, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames.