CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-18978

An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 72.8%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2019-18978

Rack-Cors Project » Rack-Cors » Version: 0.1.0

cpe:2.3:a:rack-cors_project:rack-cors:0.1.0
Rack-Cors Project » Rack-Cors » Version: 0.1.1

cpe:2.3:a:rack-cors_project:rack-cors:0.1.1
Rack-Cors Project » Rack-Cors » Version: 0.2.0

cpe:2.3:a:rack-cors_project:rack-cors:0.2.0
Rack-Cors Project » Rack-Cors » Version: 0.2.2

cpe:2.3:a:rack-cors_project:rack-cors:0.2.2
Rack-Cors Project » Rack-Cors » Version: 0.2.3

cpe:2.3:a:rack-cors_project:rack-cors:0.2.3
Rack-Cors Project » Rack-Cors » Version: 0.2.4

cpe:2.3:a:rack-cors_project:rack-cors:0.2.4
Rack-Cors Project » Rack-Cors » Version: 0.2.5

cpe:2.3:a:rack-cors_project:rack-cors:0.2.5
Rack-Cors Project » Rack-Cors » Version: 0.2.6

cpe:2.3:a:rack-cors_project:rack-cors:0.2.6
Rack-Cors Project » Rack-Cors » Version: 0.2.7

cpe:2.3:a:rack-cors_project:rack-cors:0.2.7
Rack-Cors Project » Rack-Cors » Version: 0.2.8

cpe:2.3:a:rack-cors_project:rack-cors:0.2.8
Rack-Cors Project » Rack-Cors » Version: 0.2.9

cpe:2.3:a:rack-cors_project:rack-cors:0.2.9
Rack-Cors Project » Rack-Cors » Version: 0.3.0

cpe:2.3:a:rack-cors_project:rack-cors:0.3.0
Rack-Cors Project » Rack-Cors » Version: 0.3.1

cpe:2.3:a:rack-cors_project:rack-cors:0.3.1
Rack-Cors Project » Rack-Cors » Version: 0.4.0

cpe:2.3:a:rack-cors_project:rack-cors:0.4.0
Rack-Cors Project » Rack-Cors » Version: 0.4.1

cpe:2.3:a:rack-cors_project:rack-cors:0.4.1
Rack-Cors Project » Rack-Cors » Version: 1.0.0

cpe:2.3:a:rack-cors_project:rack-cors:1.0.0
Rack-Cors Project » Rack-Cors » Version: 1.0.1

cpe:2.3:a:rack-cors_project:rack-cors:1.0.1
Rack-Cors Project » Rack-Cors » Version: 1.0.2

cpe:2.3:a:rack-cors_project:rack-cors:1.0.2
Rack-Cors Project » Rack-Cors » Version: 1.0.3

cpe:2.3:a:rack-cors_project:rack-cors:1.0.3
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-18978

Products

Pricing

Contact Us