Lucene search
GoogleOSV:GHSA-5F9H-9PJV-V6J7HistoryJul 06, 2020 - 9:31 p.m.
Directory traversal in Rack::Directory app bundled with Rack
2020-07-0621:31:02
Google
osv.dev
12
0.002 Low
EPSS
Percentile
54.9%
A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.
References
github.com/rack/rack
github.com/rack/rack/commit/dddb7ad18ed79ca6ab06ccc417a169fde451246e
github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2020-8161.yml
groups.google.com/forum/#!topic/ruby-security-ann/T4ZIsfRf2eA
groups.google.com/g/rubyonrails-security/c/IOO1vNZTzPA
lists.debian.org/debian-lts-announce/2020/07/msg00006.html
lists.debian.org/debian-lts-announce/2023/01/msg00038.html
nvd.nist.gov/vuln/detail/CVE-2020-8161
usn.ubuntu.com/4561-1
Related
openvas
openvas
Debian: Security Advisory (DLA-2216-1)
2020-05-23 00:00:00
Mageia: Security Advisory (MGASA-2020-0252)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4561-2)
2021-04-07 00:00:00
veracode
veracode
Directory Traversal
2020-05-13 02:57:36
osv
osv
ruby-rack - security update
2020-05-22 00:00:00
CVE-2020-8161
2020-07-02 19:15:12
ruby-rack - security update
2020-07-10 00:00:00
nessus
nessus
Debian DLA-2216-1 : ruby-rack security update
2020-05-26 00:00:00
Ubuntu 18.04 LTS : Rack vulnerabilities (USN-4561-1)
2020-09-30 00:00:00
Debian DLA-2275-1 : ruby-rack security update
2020-07-14 00:00:00
cvelist
cvelist
CVE-2020-8161
2020-07-02 00:00:00
redhatcve
redhatcve
CVE-2020-8161
2020-05-20 19:55:54
prion
prion
Directory traversal
2020-07-02 19:15:00
github
github
Directory traversal in Rack::Directory app bundled with Rack
2020-07-06 21:31:02
nvd
nvd
CVE-2020-8161
2020-07-02 19:15:12
debian
debian
[SECURITY] [DLA 2216-1] ruby-rack security update
2020-05-22 18:32:39
[SECURITY] [DLA 2275-1] ruby-rack security update
2020-07-10 19:56:49
[SECURITY] [DLA 3298-1] ruby-rack security update
2023-01-30 21:54:32
ubuntucve
ubuntucve
CVE-2020-8161
2020-07-02 00:00:00
debiancve
debiancve
CVE-2020-8161
2020-07-02 19:15:12
cve
cve
CVE-2020-8161
2020-07-02 19:15:12
ubuntu
ubuntu
Rack vulnerabilities
2020-09-30 00:00:00
Rack vulnerabilities
2021-04-06 00:00:00
mageia
mageia
Updated ruby-rack packages fix security vulnerability
2020-06-11 01:57:01
suse
suse
Security update for rubygem-rack (moderate)
2022-09-23 00:00:00
redhat
redhat
(RHSA-2020:4366) Important: Satellite 6.8 release
2020-10-27 12:45:25