Skip to content
OpenAdvisories

Vendor

rack

41 known vulnerabilities.

Products

rack 38 rack-session 2 rack-contrib 1
All Critical High Medium Low Exploited only Public exploit

41 results · Feed

  • Medium 6.1
    CVE-2018-16471

    Rack vulnerable to Cross-site Scripting

    There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape …

    rack rack rack ruby-rack Debian Ubuntu RubyGems