GHSA-HXX2-7VCW-MQR3 vulnerabilities

Vulnerabilities for packages: ruby3.2-sinatra, gitlab-cng, ruby3.3-sinatra, logstash...

CVE-2024-21510

Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into...

PT-2021-7627 · Sinatra +7 · Sinatra +7

Name of the Vulnerable Software and Affected Versions: Sinatra versions prior to 2.2.0 Description: The issue is related to insufficient path name restrictions in the Ruby Sinatra web application framework, allowing a remote attacker to access confidential data. The vulnerability occurs because...