Login Request a demo
RA
Product
Rack
by Rack Project · last CVE Dec 5, 2022
13
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 4Medium 1Low 0
Severity
All severities13Critical1High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rack to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-8161
8.6
3%
Jul 2
A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack…
Affected: before 2.2.0
CVE-2022-30122
7.5
2%
Dec 5
A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack
Affected: 1.2 before 2.0.9.1; 2.1.0 before 2.1.4.1; 2.2.0 before 2.2.3.1
CVE-2020-8184
7.5
3%
Jun 19
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or…
Affected: before 2.1.4; 2.2.0 before 2.2.3
CVE-2018-16470
7.5
2%
Nov 13
There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6
Affected: 2.0.4; 2.0.5
Showing 4