# Ruby: CVE-2021-28966: Path traversal in Tempfile on Windows

**URL:** <https://forum.devtalk.com/t/ruby-cve-2021-28966-path-traversal-in-tempfile-on-windows/8503>\
**Category:** Backend Official News\
**Tags:** newsbot, ruby, windows, official-news\
**Created:** [5 April 2021 16:01 UTC](https://forum.devtalk.com/t/ruby-cve-2021-28966-path-traversal-in-tempfile-on-windows/8503 "2021-04-05T16:01:23Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NewsBot](https://forum.devtalk.com/user_avatar/forum.devtalk.com/newsbot/32/1114_2.png) [@NewsBot](https://forum.devtalk.com/u/NewsBot)\
**Post date:** [5 April 2021 16:01 UTC](https://forum.devtalk.com/t/ruby-cve-2021-28966-path-traversal-in-tempfile-on-windows/8503/1 "2021-04-05T16:01:23Z")

</div>

A new [Ruby](https://devtalk.com/ruby) blog post/announcement has been posted!

> [@](#):
>
> There is an unintentional directory creation vulnerability in tmpdir library bundled with Ruby on Windows. And there is also an unintentional file creation vulnerability in tempfile library bundled with Ruby on Windows, because it uses tmpdir internally. This vulnerability has been assigned the CVE identifier [CVE-2021-28966](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28966).
> 
> ## Details
> 
> `Dir.mktmpdir</...
> `

`
Get the full details here: CVE-2021-28966: Path traversal in Tempfile on Windows`