VYPR

Gyazo

by Gyazo Project

CVEs (1)

  • CVE-2014-4994MedJan 10, 2018
    risk 0.36cvss 5.5epss 0.00

    lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames.