Lucene search
Gentoo FoundationMGASA-2018-0449HistoryNov 16, 2018 - 1:04 a.m.
Updated ruby-rack packages fix security vulnerability
2018-11-1601:04:32
Gentoo Foundation
advisories.mageia.org
14
0.006 Low
EPSS
Percentile
78.1%
There is a possible XSS vulnerability in Rack. Carefully crafted requests can impact the data returned by the scheme method on Rack::Request.Applications that expect the scheme to be limited to “http” or “https” and do not escape the return value could be vulnerable to an XSS attack (CVE-2018-16471).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 6 | noarch | ruby-rack | < 1.6.11-1 | ruby-rack-1.6.11-1.mga6 |
Related
fedora
fedora
[SECURITY] Fedora 27 Update: rubygem-rack-2.0.3-4.fc27
2018-11-28 02:22:39
[SECURITY] Fedora 29 Update: rubygem-rack-2.0.4-4.fc29
2018-11-28 02:43:12
[SECURITY] Fedora 28 Update: rubygem-rack-2.0.4-4.fc28
2018-11-28 02:46:19
veracode
veracode
Cross-site Scripting (XSS)
2018-11-07 02:13:30
openvas
openvas
Fedora Update for rubygem-rack FEDORA-2018-5743ef02a1
2018-12-04 00:00:00
openSUSE: Security Advisory for rubygem-rack (openSUSE-SU-2019:1553-1)
2019-06-14 00:00:00
Debian: Security Advisory (DLA-1585-1)
2018-11-20 00:00:00
ubuntucve
ubuntucve
CVE-2018-16471
2018-11-13 00:00:00
osv
osv
Rack vulnerable to Cross-site Scripting
2018-11-15 15:59:08
ruby-rack - security update
2018-11-21 00:00:00
CVE-2018-16471
2018-11-13 23:29:00
debian
debian
[SECURITY] [DLA 1585-1] ruby-rack security update
2018-11-21 13:28:17
github
github
Rack vulnerable to Cross-site Scripting
2018-11-15 15:59:08
redhatcve
redhatcve
CVE-2018-16471
2018-11-06 04:49:06
nessus
nessus
Debian DLA-1585-1 : ruby-rack security update
2018-11-23 00:00:00
openSUSE Security Update : rubygem-rack (openSUSE-2019-1553)
2019-06-14 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : Rack vulnerability (USN-4089-1)
2019-08-12 00:00:00
cve
cve
CVE-2018-16471
2018-11-13 23:29:00
ubuntu
ubuntu
Rack vulnerability
2019-08-07 00:00:00
prion
prion
Design/Logic Flaw
2018-11-13 23:29:00
debiancve
debiancve
CVE-2018-16471
2018-11-13 23:29:00
suse
suse
Security update for rubygem-rack (moderate)
2019-06-13 00:00:00
Security update for rubygem-rack (moderate)
2020-02-12 00:00:00
cvelist
cvelist
CVE-2018-16471
2018-11-13 23:00:00
rubygems
rubygems
Possible XSS vulnerability in Rack
2018-11-04 21:00:00