Red Hat Security Advisory

RHSA-2022:2255

pcs security update

Released 2022-05-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux High Availability E4S (v. 8.1) pcs-0.10.2-4.el8_1.2, pcs-snmp-0.10.2-4.el8_1.2

TI-2022-12310 CVE-2022-29970 · GHSA-qp49-3pvw-x4m5

LOW 37

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02137 Published 2022-05-02 Partial fix · 2.2.0 CWE-22