Vulnerabilities

TI-2022-12397 CVE-2022-30123 · GHSA-wq4h-7r42-5hrr

A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which…

MEDIUM 47

A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01955 Published 2022-12-05 Partial fix · 2.0.9.1, 2.1.4.1 +1 CWE-150

TI-2022-12396 CVE-2022-30122 · GHSA-hxqx-xwvh-44m2

Uncontrolled resource consumption in https://github.com/rack/rack

MEDIUM 43

A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02231 Published 2022-12-05 Partial fix · 2.0.9.1, 2.1.4.1 +1 CWE-400

Vulnerabilities

Filters

A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which…

Uncontrolled resource consumption in https://github.com/rack/rack