6 matches found
rubygem-sinatra: XSS in the 400 Bad Request page
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...
6.1CVSS6.4AI score0.02193EPSS
SaveExploits1References4
CVE-2018-11627
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...
6.1CVSS3.8AI score0.02193EPSS
SaveExploits1References2
Cross site request forgery (csrf)
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...
4.3CVSS6AI score0.02193EPSS
SaveExploits1References4Affected Software2
CVE-2018-11627
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception...
6.1CVSS6.2AI score
SaveExploits0References4
20