CVE-2019-8320

CVE-2019-8320 describes a Directory Traversal vulnerability in RubyGems versions 2.7.6 through 3.0.2. This flaw allowed a malicious gem to delete arbitrary files on a user's system by exploiting a race condition involving symlinks during directory creation or file touching operations. The vulnerability carries a CVSS score of 7.4 (HIGH), indicating a high potential for data loss or system unavailability due to the ability to delete critical files, especially given that gem is often run with elevated privileges. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.