Sinatra Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-11627 · ADVISORY
• sinatra/sinatra · WEB
• sinatra/sinatra commit 1278686 · WEB
• access.redhat.com/errata/RHSA-2019:0212 · WEB
• access.redhat.com/errata/RHSA-2019:0315 · WEB
• rubysec/ruby-advisory-db · WEB
• sinatra/sinatra · PACKAGE

sinatra のその他の脆弱性

• CVE-2025-61921高 7.5Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a denial of service vulner…
• CVE-2024-21510中 5.4Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (X…
• CVE-2022-45442高 8.8Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 bef…
• CVE-2022-29970高 7.5Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
• CVE-2018-7212中 5.3An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is p…