Skip to content
Noroxi

rack project records

13 published records for vendor rack project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 20
  3. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2022-30123
    41Plan

    A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint a

    CriticalCVSS 10.0No exploitEPSS 1%

    rack project · rackDec 5, 2022

  • CVE-2020-8161
    35Monitor

    A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Di

    HighCVSS 8.6No exploitEPSS 3%

    rack project · rackJul 2, 2020

  • CVE-2020-8184
    31Monitor

    A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possib

    HighCVSS 7.5No exploitEPSS 3%

    rack project · rackJun 19, 2020

  • CVE-2022-30122
    31Monitor

    A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.

    HighCVSS 7.5No exploitEPSS 2%

    rack project · rackDec 5, 2022

  • CVE-2018-16470
    31Monitor

    There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6.

    HighCVSS 7.5No exploitEPSS 2%

    rack project · rackNov 13, 2018

  • CVE-2018-16471
    25Monitor

    There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11.

    MediumCVSS 6.1No exploitEPSS 1%

    rack project · rackNov 13, 2018

  • CVE-2015-3225
    22Monitor

    lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote atta

    MediumCVSS 5.0No exploitEPSS 7%

    rack project · rackJul 26, 2015

  • CVE-2013-0263
    22Monitor

    Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows

    MediumCVSS 5.1No exploitEPSS 5%

    rack project · rackFeb 8, 2013

  • CVE-2011-5036
    21Monitor

    Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to tr

    MediumCVSS 5.0No exploitEPSS 3%

    rack project · rackDec 29, 2011

  • CVE-2013-0183
    21Monitor

    multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumpti

    MediumCVSS 5.0No exploitEPSS 3%

    rack project · rackMar 1, 2013

  • CVE-2013-0262
    18Monitor

    rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended

    MediumCVSS 4.3No exploitEPSS 2%

    rack project · rackFeb 8, 2013

  • CVE-2012-6109
    18Monitor

    lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular express

    MediumCVSS 4.3No exploitEPSS 2%

    rack project · rackMar 1, 2013

  • CVE-2013-0184
    18Monitor

    Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x befor

    MediumCVSS 4.3No exploitEPSS 2%

    rack project · rackMar 1, 2013