Description
The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.
Remediation
References
Related Vulnerabilities
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8289)
MySQL CVE-2019-2805 Vulnerability (CVE-2019-2805)
WordPress Plugin Lifeline Donation Security Bypass (1.2.6)
Ruby Cryptographic Issues Vulnerability (CVE-2013-4073)
Oracle Database Server CVE-2015-0479 Vulnerability (CVE-2015-0479)