Executive brief
Directory traversal in Rack::Directory app bundled with Rack
Affected products
- RubyGems rack
Junglewise Threat Intelligence
CVE-2020-8161: Directory traversal in Rack::Directory app bundled with Rack
CVE-2020-8161 · Severity: low · CVSS 3.1 · Published 2020-07-06
Technologies: rack (RubyGems). Vendors: RubyGems.
Related threats
- Rack CRLF injection in Rack::Multipart::Parser
- Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters
- ReDoS Vulnerability in Rack::Multipart handle_mime_head
- Rack session gets restored after deletion
- Rack ReDoS Vulnerability in HTTP Accept Headers Parsing