Arbitrary File Deletion Vulnerability in RubyGems Passenger 4.0.0 Beta 1 and 2

Arbitrary File Deletion Vulnerability in RubyGems Passenger 4.0.0 Beta 1 and 2

CVE-2012-6135 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.

Learn more about our Web Application Penetration Testing UK.