RA
Product
Rack-protection
1
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Rack-protection to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000119 | 5.9 | Mar 7 | Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed Affected: before 1.5.5; 2.0.0; 2.0.0; 2.0.0 |
Showing 1