Skip to content
OpenAdvisories

Package · Debian

ruby-sinatra

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2024-21510

    Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision

    Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack …

    sinatra ruby-sinatra ruby-sinatra Debian Ubuntu RubyGems