CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Windows. Its EPSS score suggests a 57.1% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2021-28966
Severity
HIGH
CVSS
7.5
EPSS
57.13%
Windows
Original NVD Description
In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.
Related CVEs
Other vulnerabilities affecting the same vendor(s)