VULNERABILITY INTELLIGENCE
CVE-2013-0162
CVSS score2.1 NONE
EPSS probability0.37%
CISA KEVNot currently listed
Published2013-03-01
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
Weakness classification
- nvd@nist.gov: CWE-264