Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ajmilazzo

#27891of 53,635
9.1Total CVSS
Vulnerabilities · 1
PT-2024-1854
9.1
2024-02-26
Rack-Cors · Rack-Cors · CVE-2024-27456
**Name of the Vulnerable Software and Affected Versions** rack-cors (aka Rack CORS Middleware) version 2.0.1 **Description** The issue is related to incorrectly used standard permissions in the Rack CORS Middleware, which may allow an attacker to impact the integrity, confidentiality, and availability of information. The .rb files have 0666 permissions. **Recommendations** For version 2.0.1, consider changing the permissions of the .rb files to a more secure setting to prevent potential exploitation. As a temporary workaround, restrict access to the .rb files until a patch is available.