Описание
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.6.4-4ubuntu0.2 |
| devel | not-affected | 2.2.4-2 |
| eoan | ignored | end of life |
| esm-apps/bionic | released | 1.6.4-4ubuntu0.2 |
| esm-apps/focal | released | 2.0.7-2ubuntu0.1 |
| esm-apps/jammy | not-affected | 2.1.4-5ubuntu1 |
| esm-apps/xenial | released | 1.6.4-3ubuntu0.2 |
| esm-infra-legacy/trusty | released | 1.5.2-3+deb8u3ubuntu1~esm4 |
| focal | released | 2.0.7-2ubuntu0.1 |
| groovy | released | 2.1.1-5ubuntu0.1 |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.
A reliance on cookies without validation/integrity check security vuln ...
Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names
Уязвимость функции parse_cookies_header из utils.rb модульного интерфейса между веб-серверами и веб-приложениями Rack, позволяющая нарушителю оказать воздействие на целостность данных
EPSS
5 Medium
CVSS2
7.5 High
CVSS3