Vulnerability Database

300,444

Total vulnerabilities in the database

CVE-2019-11879

The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root directory. NOTE: The vendor states that this is analogous to Options FollowSymlinks in the Apache HTTP Server, and therefore it is "not a problem.

  • Published: May 10, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-11879
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ruby-lang / webrick 1.4.2 1.4.2.x