Lucene search

K
cvelistMitreCVELIST:CVE-2022-29970
HistoryMay 02, 2022 - 12:00 a.m.

CVE-2022-29970

2022-05-0200:00:00
mitre
www.cve.org
7
sinatra
path validation
cve-2022-29970
static files
security

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

61.2%

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.