CVE-2019-18978

Related Files

Debian Security Advisory 4918-1

Posted May 28, 2021

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4918-1 - Improper pathname handling in ruby-rack-cors, a middleware that makes Rack-based apps CORS compatible, may result in access to private resources.

tags | advisory, ruby

systems | linux, debian

advisories | CVE-2019-18978

SHA-256 | aad43033fd2d923343981ed3f9f6cf6e629a5e445a969a1991a2feeb576f243c

Download | Favorite | View

Ubuntu Security Notice USN-4571-1

Posted Oct 5, 2020

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4571-1 - It was discovered that rack-cors did not properly handle relative file paths. An attacker could use this vulnerability to access arbitrary files.

tags | advisory, arbitrary

systems | linux, ubuntu

advisories | CVE-2019-18978

SHA-256 | a0a0658399d5e63d849ed5966f66fabd79ae781d9b68bb0c3de1e3f760f7fb7f

Download | Favorite | View