Executive brief
sinatra does not validate expanded path matches
Affected products
- RubyGems sinatra
Junglewise Threat Intelligence
CVE-2022-29970: sinatra does not validate expanded path matches
CVE-2022-29970 · Severity: low · CVSS 3.1 · Published 2022-05-03
Technologies: sinatra (RubyGems). Vendors: RubyGems.