Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8
CVE-2022-45442
- EPSS 0.16%
- Published 28.11.2022 21:15:10
- Last modified 21.11.2024 07:29:16
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Dispos...
7.5
CVE-2022-29970
- EPSS 0.57%
- Published 02.05.2022 05:15:06
- Last modified 21.11.2024 07:00:05
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
6.1
CVE-2018-11627
- EPSS 0.4%
- Published 31.05.2018 19:29:00
- Last modified 21.11.2024 03:43:43
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.
5.3
CVE-2018-7212
- EPSS 0.28%
- Published 18.02.2018 06:29:00
- Last modified 21.11.2024 04:11:48
An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.
1