We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 4e70486 commit f39d4a5Copy full SHA for f39d4a5
gems/sinatra/CVE-2018-7212.yml
@@ -5,15 +5,15 @@ url: https://github.com/sinatra/sinatra/pull/1379
5
date: 2018-01-09
6
title: sinatra ruby gem path traversal via backslash characters on Windows
7
description: |
8
-An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb
+ An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb
9
in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash
10
characters.
11
12
cvss_v3: 5.3
13
cvss_v2: 5.0
14
15
patched_versions:
16
-- ">= 2.0.1"
+ - ">= 2.0.1"
17
18
unaffected_versions:
19
-- "< 2.0.0"
+ - "< 2.0.0"
0 commit comments