EUVD-2018-0731

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Possible XSS vulnerability in Rack versions before 2.0.6 and 1.6.11 affects scheme method data.

Reporter	Title	Published	Views	Family All 82
CNVD	Rack Cross-Site Scripting Vulnerability	15 Nov 201800:00	–	cnvd
CVE	CVE-2018-16471	13 Nov 201823:00	–	cve
Cvelist	CVE-2018-16471	13 Nov 201823:00	–	cvelist
Debian	[SECURITY] [DLA 1585-1] ruby-rack security update	21 Nov 201813:27	–	debian
Debian CVE	CVE-2018-16471	13 Nov 201823:00	–	debiancve
Tenable Nessus	Debian DLA-1585-1 : ruby-rack security update	23 Nov 201800:00	–	nessus
Tenable Nessus	Fedora 28 : 1:rubygem-rack (2018-02e965a729)	3 Jan 201900:00	–	nessus
Tenable Nessus	Fedora 27 : 1:rubygem-rack (2018-5743ef02a1)	28 Nov 201800:00	–	nessus
Tenable Nessus	Fedora 29 : 1:rubygem-rack (2018-e8ff8b7f8e)	3 Jan 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : rubygem-rack (openSUSE-2019-1553)	14 Jun 201900:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "0bcd1f1f-e127-33c7-adec-08e00a1353c1",
        "vendor": {
          "name": "rack"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "931ab2cf-d1d8-330f-82d7-ff5d4f11ca6f",
        "product": {
          "name": "rack"
        },
        "product_version": "2.0.6, 1.6.11"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-16471
github	www.github.com/rack/rack
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2018-16471.yml
groups	www.groups.google.com/forum/
groups	www.groups.google.com/forum/
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00022.html
usn	www.usn.ubuntu.com/4089-1
lists	www.lists.opensuse.org/opensuse-security-announce/2019-06/msg00032.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html
suse	www.suse.com/security/cve/CVE-2018-16471.html

07 Oct 2025 00:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 36.1

CVSS 24.3

EPSS0.00829

xss vulnerability rack scheme method security threat