PT-2018-3008 · Ruby+2 · Rack+2
CVE-2018-16471
·
Publicado
2018-11-13
·
Atualizado
2026-03-13
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Rack versions prior to 2.0.6
Rack versions prior to 1.6.11
Description
The issue is related to a possible XSS vulnerability. Carefully crafted requests can impact the data returned by the
scheme method on Rack::Request. This could lead to an XSS attack if the scheme return value is not properly escaped, particularly in applications that expect the scheme to be limited to 'http' or 'https'. Applications using normal escaping mechanisms provided by Rails may not be impacted, but those bypassing or not using these mechanisms could be vulnerable.Recommendations
For Rack versions prior to 2.0.6, update to version 2.0.6 or later to resolve the issue.
For Rack versions prior to 1.6.11, update to version 1.6.11 or later to resolve the issue.
As a temporary workaround, consider properly escaping the return value of the
scheme method on Rack::Request to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Rack
Suse
Ubuntu