Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5825
HistoryFeb 20, 2018 - 3:03 a.m.

Directory Traversal

2018-02-2003:03:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1

0.001 Low

EPSS

Percentile

35.6%

sinatra and rack-protection are vulnerable to directory traversal attacks. The libraries did not take into account the \\\\ within Windows systems as a method of traversal, allowing attackers to walk the file system.

CPENameOperatorVersion
rack-protectionle2.0.0
sinatrale2.0.0

0.001 Low

EPSS

Percentile

35.6%