CVE-2012-4522

CVE-2012-4522 describes a vulnerability in Ruby 1.9.3 (before patchlevel 286) and Ruby 2.0.0 (before r37163) where a NUL byte in a file path can allow attackers to create files in unexpected locations or with unexpected names. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector, low attack complexity, and a potential impact of partial integrity loss. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.