SI
Product
Sinatra
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Sinatra to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-11627 | 6.1 | May 31 | Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception Affected: before 2.0.2 |
| CVE-2018-7212 | 5.3 | Feb 18 | An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; +3 more |
Showing 2
