Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-8184
7.5
HIGHCVSS v3
Severity scale
010
Description
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
rack
RubyGemsRack provides a minimal, modular and adaptable interface for developing
web applications in Ruby. By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
RubyGemsRack provides a minimal, modular and adaptable interface for developing
web applications in Ruby. By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
< 2.1.4, >= 2.2.0, < 2.2.3NVD
GitHub