Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-7212 2 Microsoft, Sinatrarb 2 Windows, Sinatra 2024-11-21 5.3 Medium
An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.
CVE-2018-11627 2 Redhat, Sinatrarb 3 Cloudforms, Cloudforms Managementengine, Sinatra 2024-11-21 N/A
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.