Rubygems

rubygems

Vendor: Rubyforge • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2007-0469

1Rubyforge

1Rubygems

Apr 23, 2026

Jan 24, 2007

N/A· v4

N/A· v3

9.3 HIGH· v2

The extract_files function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of...Show more