RubyGems CVE-2019-8320 Symlink Directory Traversal Vulnerability

Bugtraq ID:	108682
Class:	Input Validation Error
CVE:	CVE-2019-8320
Remote:	Yes
Local:	No
Published:	Apr 11 2019 12:00AM
Updated:	Apr 11 2019 12:00AM
Credit:	ooooooo_q
Vulnerable:	RubyGems RubyGems 3.0.2 RubyGems RubyGems 2.7.7 RubyGems RubyGems 2.7.6
Not Vulnerable:	RubyGems RubyGems 3.0.3 RubyGems RubyGems 2.7.8

RubyGems CVE-2019-8320 Symlink Directory Traversal Vulnerability

RubyGems is prone to a directory-traversal vulnerability.

An attacker may exploit this issue to gain read/write access to the files outside of the restricted directory; this may aid in further attacks.

RubyGems 2.7.6 through 3.0.2 are vulnerable.

RubyGems CVE-2019-8320 Symlink Directory Traversal Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

RubyGems CVE-2019-8320 Symlink Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RubyGems CVE-2019-8320 Symlink Directory Traversal Vulnerability

References:

• Rubygems Homepage (Rubygems)
  
• Delete directory using symlink when decompressing tar ()
  
• March 2019 Security Advisories ()