CVE-2013-0162
ryan davis ruby parser: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in ruby_parser 3.1.2.
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ryan_davis:ruby_parser
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8mvw-22r7-w6fq | RubyGems | ruby_parser | >=2.0.2 <3.1.2 | 3.1.2 |