Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-8161

Опубликовано: 02 июл. 2020
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5
CVSS3: 8.6

Описание

A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.

РелизСтатусПримечание
bionic

released

1.6.4-4ubuntu0.2
devel

not-affected

2.1.1-5
eoan

ignored

end of life
esm-apps/bionic

released

1.6.4-4ubuntu0.2
esm-apps/focal

released

2.0.7-2ubuntu0.1
esm-apps/jammy

not-affected

2.1.1-5
esm-apps/xenial

released

1.6.4-3ubuntu0.2
esm-infra-legacy/trusty

released

1.5.2-3+deb8u3
focal

released

2.0.7-2ubuntu0.1
groovy

not-affected

2.1.1-5

Показывать по

EPSS

Процентиль: 64%
0.00475
Низкий

5 Medium

CVSS2

8.6 High

CVSS3

Связанные уязвимости

CVSS3: 5.9
redhat
больше 5 лет назад

A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.

CVSS3: 8.6
nvd
больше 5 лет назад

A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.

CVSS3: 8.6
debian
больше 5 лет назад

A directory traversal vulnerability exists in rack < 2.2.0 that allows ...

CVSS3: 8.6
github
больше 5 лет назад

Directory traversal in Rack::Directory app bundled with Rack

CVSS3: 8.6
fstec
больше 5 лет назад

Уязвимость функции check_forbidden из rack/directory.rb модульного интерфейса между веб-серверами и веб-приложениями Rack, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 64%
0.00475
Низкий

5 Medium

CVSS2

8.6 High

CVSS3