Rack-cors Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Rack-cors Project records in CISA KEV

No Rack-cors Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Rack-cors · all components

TI-2017-08228 CVE-2017-11173 · GHSA-2j9c-9vmv-7m39

MEDIUM 43

Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02345 Published 2017-07-13 Fixed in 0.4.1

TI-2019-13673 CVE-2019-18978 · GHSA-pf8f-w267-mq2h

LOW 29

An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02462 Published 2019-11-14 Fixed in 1.0.4 CWE-22