PT-2017-11796 · Ruby · Rack-Cors

Jens Mueller · Publicado 2017-07-13 · Atualizado 2020-03-03 · CVE-2017-11173

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rack-cors versions prior to 0.4.1

Description The issue allows a malicious third-party site to perform CORS requests due to a missing anchor in the generated regex. This could lead to unintended domains being allowed if the configuration is set to trust specific domain names. For instance, if the configuration is intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as example.com-example.net) would be inadvertently allowed.

Recommendations For versions prior to 0.4.1, update to version 0.4.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-11173

DSA-3931-1

GHSA-2J9C-9VMV-7M39

Produtos afetados

Rack-Cors

Referências · 13

• https://github.com/cyu/rack-cors/commit/42ebe6caa8e85ffa9c8a171bda668ba1acc7a5e6 · Correção
• https://github.com/cyu/rack-cors · Nota
• http://debian.org/security/2017/dsa-3931 · Aviso do Fabricante
• https://packetstormsecurity.com/files/143345/rack-cors-Missing-Anchor.html · Nota
• https://osv.dev/vulnerability/CVE-2017-11173 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-2j9c-9vmv-7m39 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-11173 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2017/Jul/22 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-11173 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-11173 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-11173 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2017-11173 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-11173 · Aviso do Fabricante