Steveklabnik vulnerabilities
We track 1 vulnerability in Steveklabnik products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 23, 2024.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Steveklabnik vulnerabilities
- 7.8 High severity
request_store: Incorrect Default Permissions
RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, a