VULNERABILITY INTELLIGENCE

CVE-2021-28966

CVSS score7.5 HIGH

EPSS probability58.04%

CISA KEVNot currently listed

Published2021-07-30

Last modified2026-06-17

Description

In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.