rubygem-sinatra: XSS in the 400 Bad Request page

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

Cross site request forgery (csrf)

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

XSS via the 400 Bad Request page

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...

PT-2018-10712

Name of the Vulnerable Software and Affected Versions Sinatra versions prior to 2.0.2 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs on the 400 Bad Request page when there is a params parser exception. Recommendations For versions prior to 2.0.2, update to versi...