Skip to content
OpenAdvisories

Package · Debian

ruby-rack-cors

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2017-11173

    Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request

    Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then…

    rack-cors ruby-rack-cors ruby-rack-cors Debian Ubuntu RubyGems