CVE-2022-45442 Sinatra vulnerable to Reflected File Download attack

2022-11-2800:00:00

CWE-494

GitHub_M

www.cve.org

sinatra ruby web application

reflected file download

content-disposition

vulnerability patch

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.005

Percentile

77.7%

JSON

Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.

CNA Affected

[
  {
    "vendor": "sinatra",
    "product": "sinatra",
    "versions": [
      {
        "version": ">= 3.0, < 3.0.4",
        "status": "affected"
      },
      {
        "version": ">= 2.0, < 2.2.3",
        "status": "affected"
      }
    ]
  }
]