CVE-2014-4994

CVE-2014-4994 describes a local file write vulnerability in the gyazo gem version 1.0.0 for Ruby, specifically within the lib/gyazo/client.rb component. An attacker could exploit this by leveraging a symlink attack on temporary files with time-based filenames, allowing them to write to arbitrary files on the system. Rated as MEDIUM severity with a CVSS score of 5.5, this vulnerability requires local access and low attack complexity, potentially leading to high integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.