Red Hat Security AdvisoryRHSA-2022:4661
pcs security update
Released 2022-05-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux HighAvailability (v. 8) pcs-0.10.12-6.el8_6.1, pcs-snmp-0.10.12-6.el8_6.1
- Red Hat Enterprise Linux ResilientStorage (v. 8) pcs-0.10.12-6.el8_6.1, pcs-snmp-0.10.12-6.el8_6.1
Fixes 1 record
Priority LOW 37
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02137 · Published 2022-05-02 · Partial fix · 2.2.0 CWE-22