CVE-2017-0901

Name of the Vulnerable Software and Affected Versions RubyGems versions 2.6.12 and earlier

Description The issue exists due to insufficient input validation in the package manager. Exploitation of this issue may allow a remote attacker to overwrite any file on the filesystem. A maliciously crafted gem can potentially be used to achieve this.

Recommendations For RubyGems versions 2.6.12 and earlier, consider updating to a version that fixes the specification name validation issue to prevent potential file overwrites. At the moment, there is no information about a newer version that contains a fix for this vulnerability.