Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1
CVE-2024-27456
- EPSS 0.13%
- Published 26.02.2024 16:28:00
- Last modified 18.09.2025 16:24:59
rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions for the .rb files.
5.3
CVE-2019-18978
- EPSS 1.02%
- Published 14.11.2019 21:15:12
- Last modified 21.11.2024 04:33:55
An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.
8.8
CVE-2017-11173
- EPSS 1.75%
- Published 13.07.2017 03:29:00
- Last modified 20.04.2025 01:37:25
Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain n...
1