Skip to content
OpenAdvisories

Package · Ubuntu

ruby-sinatra

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-21510

    Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision

    Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack …

    sinatra ruby-sinatra ruby-sinatra Debian Ubuntu RubyGems
  • Medium 6.1
    CVE-2018-11627

    Sinatra Cross-site Scripting vulnerability

    Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

    sinatra ruby-sinatra Ubuntu RubyGems