Lucene search
+L

12 matches found

RedHat Linux
RedHat Linux
•added 2019/02/12 1:59 p.m.•18 views

rubygem-sinatra: XSS in the 400 Bad Request page

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS6.4AI score0.02159EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2019/02/07 11:01 p.m.•15 views

rubygem-sinatra: XSS in the 400 Bad Request page

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS6.4AI score0.02159EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2018/06/01 2:49 p.m.•40 views

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS3.8AI score0.02159EPSS
SaveExploits1References2
Prion
Prion
•added 2018/05/31 7:29 p.m.•24 views

Cross site request forgery (csrf)

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

4.3CVSS6AI score0.02159EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
•added 2018/05/31 7:29 p.m.•36 views

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS6.5AI score0.02159EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2018/05/31 7:29 p.m.•42 views

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2018/05/31 7:00 p.m.•47 views

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

5.9AI score0.02159EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2018/05/31 7:00 p.m.•88 views

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS6.2AI score0.02159EPSS
SaveExploits1
Mend
Mend
•added 2018/05/31 7:00 p.m.•9 views

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS0.02159EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/31 12:00 a.m.•4 views

CVE-2018-11627: Improper Neutralization of Input During Web Page Generation

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS6.6AI score0.02159EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/05/31 12:00 a.m.•5 views

PT-2018-10712

Name of the Vulnerable Software and Affected Versions Sinatra versions prior to 2.0.2 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs on the 400 Bad Request page when there is a params parser exception. Recommendations For versions prior to 2.0.2, update to versi...

6.1CVSS0.02159EPSS
SaveExploits1References14
RubySec
RubySec
•added 2018/05/31 12:00 a.m.•42 views

XSS via the 400 Bad Request page

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

6.1CVSS3.6AI score0.02159EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder