CVE-2018-11627

Опубликовано: 31 мая 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

Ссылки

https://access.redhat.com/errata/RHSA-2019:0212
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0315
Third Party Advisory
https://github.com/sinatra/sinatra/commit/12786867d6faaceaec62c7c2cb5b0e2dc074d71a
Patch
Third Party Advisory
https://github.com/sinatra/sinatra/issues/1428
Exploit
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0212
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0315
Third Party Advisory
https://github.com/sinatra/sinatra/commit/12786867d6faaceaec62c7c2cb5b0e2dc074d71a
Patch
Third Party Advisory
https://github.com/sinatra/sinatra/issues/1428
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sinatrarb:sinatra:*:*:*:*:*:*:*:*

Версия до 2.0.2 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*

cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00398

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-11627

CVSS3: 6.1

ubuntu

больше 7 лет назад

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

CVE-2018-11627

CVSS3: 6.1

redhat

больше 7 лет назад

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

CVE-2018-11627

CVSS3: 6.1

debian

больше 7 лет назад

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs ...

GHSA-mq35-wqvf-r23c

CVSS3: 6.1

github

больше 7 лет назад

Sinatra Cross-site Scripting vulnerability

EPSS

Процентиль: 60%

0.00398

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79