CPE Details
Rack Project Rack 2.1.2
2.1.2
2020-06-24 14:14 +00:00
2020-06-24 14:14 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:rack_project:rack:2.1.2:*:*:*:*:*:*:*
Informations
Vendor
rack_projectProduct
rackVersion
2.1.2Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack. | 7.5 |
HIGH |
||
| A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack. | 10 |
CRITICAL |
||
| A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure. | 8.6 |
HIGH |
||
| A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix. | 7.5 |
HIGH |
2024©
tesweb SA
