Количество 9
Количество 9
BDU:2025-04293
Уязвимость интерфейса модуля Rack интерпретатора языка программирования Ruby, позволяющая нарушителю оказать влияние на целостность защищаемой информации
ROS-20250403-16
Уязвимость rubygem-rack
CVE-2025-27111
Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11.
CVE-2025-27111
Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11.
CVE-2025-27111
Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11.
CVE-2025-27111
Rack is a modular Ruby web server interface. The Rack::Sendfile middle ...
SUSE-SU-2025:1492-1
Security update for rubygem-rack-1_6
GHSA-8cgq-6mh2-7j6v
Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
SUSE-SU-2025:0874-1
Security update for rubygem-rack
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-04293 Уязвимость интерфейса модуля Rack интерпретатора языка программирования Ruby, позволяющая нарушителю оказать влияние на целостность защищаемой информации | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
 | ROS-20250403-16 Уязвимость rubygem-rack | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
 | CVE-2025-27111 Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-27111 Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11. | CVSS3: 5.3 | 1% Низкий | больше 1 года назад |
 | CVE-2025-27111 Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| CVE-2025-27111 Rack is a modular Ruby web server interface. The Rack::Sendfile middle ... | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | SUSE-SU-2025:1492-1 Security update for rubygem-rack-1_6 | 1% Низкий | около 1 года назад | |
| GHSA-8cgq-6mh2-7j6v Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2025:0874-1 Security update for rubygem-rack | больше 1 года назад |
Уязвимостей на страницу