pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ALT Vulnerability

Browse Source
This commit is contained in:
Иван Пепеляев 2024-02-29 03:02:09 +00:00
parent cda0d71b5e
commit faa8285b85
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
oval/p10/ALT-PU-2023-4270/definitions.json
View File

@ -40,7 +40,7 @@
"Source": "CVE"
}
],
"Description": "This update upgrades gem-rack-cors to version 2.0.1.0-alt0.1. \nSecurity Fix(es):\n\n * BDU:2021-04587: Уязвимость ПО организации совместимости приложений Rack с CORS Rack-cors, связанная с некорректным ограничением имени пути к каталогу, позволяющая нарушителю получить доступ к конфиденциальным данным\n\n * CVE-2019-18978: An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.",
"Description": "This update upgrades gem-rack-cors to version 2.0.1.0-alt0.1. \nSecurity Fix(es):\n\n * BDU:2021-04587: Уязвимость программного обеспечения организации совместимости приложений Rack с CORS Rack-cors, связанная с некорректным ограничением имени пути к каталогу, позволяющая нарушителю получить доступ к конфиденциальным данным\n\n * CVE-2019-18978: An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",