CVE-2018-1000073: Path Traversal
Last updated 18 August 2025
Other sources
Path traversal vulnerability in installlocation function of package.rb was found that is triggered when writing to a symlinked basedir outside of the root.
Upstream fix:
https://github.com/rubygems/rubygems/commit/1b931fc03b819b9a0214be3eaca844ef534175e2
External References:
https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/
— Red Hat
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in installlocation function of package.rb that can result in path traversal when writing to a symlinked basedir outside of the root. This vulnerability appears to have been fixed in 2.7.6.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID for this RubyGems vulnerability?
The vulnerability ID is CVE-2018-1000073.
What is the severity of CVE-2018-1000073?
The severity of CVE-2018-1000073 is medium with a CVSS score of 5.5.
Which RubyGems versions are affected by CVE-2018-1000073?
RubyGems versions Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 are affected by CVE-2018-1000073.
How can I fix CVE-2018-1000073?
To fix CVE-2018-1000073, it is recommended to update RubyGems to version 2.7.6 or later.
Where can I find more information about CVE-2018-1000073?
More information about CVE-2018-1000073 can be found at the following references: [1] http://blog.rubygems.org/2018/02/15/2.7.6-released.html, [2] https://github.com/rubygems/rubygems/commit/1b931fc03b819b9a0214be3eaca844ef534175e2, [3] https://usn.ubuntu.com/3621-1/