PT-2018-3008 · Ruby+2 · Rack+2
Published
2018-11-13
·
Updated
2026-03-13
·
CVE-2018-16471
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Rack versions prior to 2.0.6
Rack versions prior to 1.6.11
Description
The issue is related to a possible XSS vulnerability. Carefully crafted requests can impact the data returned by the
scheme method on Rack::Request. This could lead to an XSS attack if the scheme return value is not properly escaped, particularly in applications that expect the scheme to be limited to 'http' or 'https'. Applications using normal escaping mechanisms provided by Rails may not be impacted, but those bypassing or not using these mechanisms could be vulnerable.Recommendations
For Rack versions prior to 2.0.6, update to version 2.0.6 or later to resolve the issue.
For Rack versions prior to 1.6.11, update to version 1.6.11 or later to resolve the issue.
As a temporary workaround, consider properly escaping the return value of the
scheme method on Rack::Request to minimize the risk of exploitation.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rack
Suse
Ubuntu