Lucene search
GoogleOSV:CVE-2022-29970HistoryMay 02, 2022 - 5:15 a.m.
CVE-2022-29970
2022-05-0205:15:06
Google
osv.dev
9
sinatra
static files
path validation
security
cve-2022-29970
EPSS
0.002
Percentile
61.2%
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
Related
nessus
nessus
Debian DLA-3166-1 : ruby-sinatra - LTS security update
2022-10-28 00:00:00
RHEL 8 : pcs (RHSA-2022:4661)
2022-05-19 00:00:00
RHEL 8 : pcs (RHSA-2022:2256)
2022-05-16 00:00:00
osv
osv
Important: pcs security update
2022-05-18 13:52:10
Important: pcs security update
2022-05-18 00:00:00
ruby-sinatra - security update
2022-10-28 00:00:00
rubygems
rubygems
sinatra does not validate expanded path matches
2022-05-02 21:00:00
cve
cve
CVE-2022-29970
2022-05-02 05:15:06
mageia
mageia
Updated ruby-sinatra packages fix security vulnerability
2022-08-13 05:32:35
oraclelinux
oraclelinux
pcs security update
2022-05-20 00:00:00
pcs security update
2022-06-30 00:00:00
github
github
sinatra does not validate expanded path matches
2022-05-03 00:00:43
debiancve
debiancve
CVE-2022-29970
2022-05-02 05:15:06
redhat
redhat
(RHSA-2022:2256) Important: pcs security update
2022-05-16 07:05:30
(RHSA-2022:2253) Important: pcs security update
2022-05-16 07:03:34
(RHSA-2022:4587) Important: pcs security update
2022-05-18 00:08:58
almalinux
almalinux
Important: pcs security update
2022-05-18 00:00:00
Important: pcs security update
2022-05-18 13:52:10
rocky
rocky
pcs security update
2022-05-18 13:52:10
Satellite 6.12 Release
2022-11-16 13:21:30
nvd
nvd
CVE-2022-29970
2022-05-02 05:15:06
debian
debian
[SECURITY] [DLA 3166-1] ruby-sinatra security update
2022-10-28 03:53:39
ubuntucve
ubuntucve
CVE-2022-29970
2022-05-02 00:00:00
prion
prion
Code injection
2022-05-02 05:15:00
cvelist
cvelist
CVE-2022-29970
2022-05-02 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3166-1)
2022-10-29 00:00:00
Mageia: Security Advisory (MGASA-2022-0280)
2022-08-15 00:00:00
Debian: Security Advisory (DLA-3877-1)
2024-09-06 00:00:00
redhatcve
redhatcve
CVE-2022-29970
2022-05-02 18:30:17
veracode
veracode
Privilege Escalation
2022-05-04 17:08:11
