CVE-2018-17567

Source
https://nvd.nist.gov/vuln/detail/CVE-2018-17567
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-17567.json
Aliases
Related
Published
2018-09-28T00:29:04Z
Modified
2023-11-29T06:29:31.560745Z
Details

Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "_config.yml" file.

References

Affected packages

Git / github.com/jekyll/jekyll

Affected versions

v3.*

v3.7.0
v3.7.1
v3.7.2
v3.7.3
v3.8.0
v3.8.1
v3.8.2
v3.8.3