Rack CORS Middleware has Insecure File Permissions

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-27456 · ADVISORY
• cyu/rack-cors · WEB
• GitHub Advisory GHSA-785g-282q-pwvx · ADVISORY
• cyu/rack-cors · PACKAGE
• cyu/rack-cors · WEB
• rubysec/ruby-advisory-db · WEB

rack-cors のその他の脆弱性

• CVE-2019-18978中 5.3An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access p…
• CVE-2017-11173高 8.8Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configurat…