Skip to content

Commit c2f3a04

Browse files
Robert Schultheisreedloden
authored andcommitted
Add CVE-2018-17567 for jekyll (#394)
1 parent c668902 commit c2f3a04

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

gems/jekyll/CVE-2018-17567.yml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
gem: jekyll
3+
cve: 2018-17567
4+
date: 2018-09-28
5+
url: https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/
6+
title: Jekyll _config.yml privilege escalation
7+
description: Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows
8+
attackers to access arbitrary files by specifying a symlink in the "include" key
9+
in the "_config.yml" file.
10+
cvss_v3: 7.5
11+
patched_versions:
12+
- "~> 3.6.3"
13+
- "~> 3.7.4"
14+
- ">= 3.8.4"

0 commit comments

Comments
 (0)