CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

RedhatCVE•added 2024/02/26 9:3 p.m.•32 views

CVE-2024-27456

An insecure file permission flaw was found in rack-cors. The permissions for .rb files distributed with rack-cors ruby gem are set to 0666 by default, which may allow users with low privileges to edit files. This issue impacts integrity, confidentiality, and availability...

7.8CVSS6.8AI score0.00771EPSS

Exploits1References3

NVD•added 2024/02/26 4:28 p.m.•30 views

CVE-2024-27456

rack-cors aka Rack CORS Middleware 2.0.1 has 0666 permissions for the .rb files...

9.1CVSS6.5AI score0.00771EPSS

Exploits1References1

UbuntuCve•added 2024/02/26 4:28 p.m.•15 views

CVE-2024-27456

rack-cors aka Rack CORS Middleware 2.0.1 has 0666 permissions for the .rb files...

9.1CVSS7.1AI score0.00771EPSS

Exploits1References2

Vulnrichment•added 2024/02/26 12:0 a.m.•16 views

CVE-2024-27456

rack-cors aka Rack CORS Middleware 2.0.1 has 0666 permissions for the .rb files...

9.3AI score0.00771EPSS

Exploits1References1

Cvelist•added 2024/02/26 12:0 a.m.•43 views

CVE-2024-27456

rack-cors aka Rack CORS Middleware 2.0.1 has 0666 permissions for the .rb files...

6.8AI score0.00771EPSS

Exploits1References1

CVE•added 2024/02/26 12:0 a.m.•3658 views

CVE-2024-27456

CVE-2024-27456 concerns rack-cors 2.0.1 with insecure file permissions: .rb files shipped as 0666, potentially impacting integrity, confidentiality, and availability. Root cause: default permissive file permissions. Public exposure documented by Red Hat and other sources; exploitation details are...

9.1CVSS6.6AI score0.00771EPSS

Exploits1References1Affected Software1