Lucene search
Gentoo FoundationMGASA-2022-0280HistoryAug 13, 2022 - 5:32 a.m.
Updated ruby-sinatra packages fix security vulnerability
2022-08-1305:32:35
Gentoo Foundation
advisories.mageia.org
18
0.002 Low
EPSS
Percentile
60.8%
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. (CVE-2022-29970)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | ruby-sinatra | < 2.0.8.1-1.1 | ruby-sinatra-2.0.8.1-1.1.mga8 |
Related
osv
osv
Important: pcs security update
2022-05-18 13:52:10
CVE-2022-29970
2022-05-02 05:15:06
Important: pcs security update
2022-05-18 00:00:00
nessus
nessus
Debian DLA-3166-1 : ruby-sinatra - LTS security update
2022-10-28 00:00:00
RHEL 8 : pcs (RHSA-2022:4661)
2022-05-19 00:00:00
RHEL 8 : pcs (RHSA-2022:2256)
2022-05-16 00:00:00
cve
cve
CVE-2022-29970
2022-05-02 05:15:00
almalinux
almalinux
Important: pcs security update
2022-05-18 13:52:10
Important: pcs security update
2022-05-18 00:00:00
rocky
rocky
pcs security update
2022-05-18 13:52:10
Satellite 6.12 Release
2022-11-16 13:21:30
redhat
redhat
(RHSA-2022:4587) Important: pcs security update
2022-05-18 00:08:58
(RHSA-2022:2253) Important: pcs security update
2022-05-16 07:03:34
(RHSA-2022:4661) Important: pcs security update
2022-05-18 13:52:10
oraclelinux
oraclelinux
pcs security update
2022-06-30 00:00:00
pcs security update
2022-05-20 00:00:00
prion
prion
Code injection
2022-05-02 05:15:00
debian
debian
[SECURITY] [DLA 3166-1] ruby-sinatra security update
2022-10-28 03:54:34
cvelist
cvelist
CVE-2022-29970
2022-05-02 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3166-1)
2022-10-29 00:00:00
Mageia: Security Advisory (MGASA-2022-0280)
2022-08-15 00:00:00
ubuntucve
ubuntucve
CVE-2022-29970
2022-05-02 00:00:00
debiancve
debiancve
CVE-2022-29970
2022-05-02 05:15:00
github
github
sinatra does not validate expanded path matches
2022-05-03 00:00:43
veracode
veracode
Privilege Escalation
2022-05-04 17:08:11
redhatcve
redhatcve
CVE-2022-29970
2022-05-02 18:30:17
