https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:01:04 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:10987 <p><strong>Affected:</strong> AlmaLinux:8: pcs, AlmaLinux:8: pcs-snmp</p> <p>The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.</p> <p>Security Fix(es):</p> <p>* sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header (CVE-2024-21510)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: pcs, AlmaLinux:8: pcs-snmp</p> <p>The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.</p> <p>Security Fix(es):</p> <p>* sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header (CVE-2024-21510)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:10987 https://cve.radiocsirt.org/vuln/bdu:2025-03808 bdu:2025-03808 https://cve.radiocsirt.org/vuln/bdu:2025-03808 https://cve.radiocsirt.org/vuln/brew-mailcatcher-cve-2024-21510 <p><strong>Affected:</strong> Homebrew: mailcatcher</p> <p>Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.</p> <p><strong>Affected:</strong> Homebrew: mailcatcher</p> <p>Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.</p> https://cve.radiocsirt.org/vuln/brew-mailcatcher-cve-2024-21510 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0967 certfr-2025-avi-0967 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0967 https://cve.radiocsirt.org/vuln/euvd-2026-202275 EUVD-2026-202275 https://cve.radiocsirt.org/vuln/euvd-2026-202275 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21510 <p>Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.</p> <p>Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-21510 https://cve.radiocsirt.org/vuln/ghsa-hxx2-7vcw-mqr3 <p><strong>Affected:</strong> RubyGems: sinatra</p> <p>Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.</p> <p><strong>Affected:</strong> RubyGems: sinatra</p> <p>Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.</p> https://cve.radiocsirt.org/vuln/ghsa-hxx2-7vcw-mqr3 https://cve.radiocsirt.org/vuln/gsd-2024-21510 gsd-2024-21510 https://cve.radiocsirt.org/vuln/gsd-2024-21510 https://cve.radiocsirt.org/vuln/rhsa-2024:10987 <p>sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header</p> <p>sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header</p> https://cve.radiocsirt.org/vuln/rhsa-2024:10987 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21510 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ruby-sinatra, Ubuntu:Pro:18.04:LTS: ruby-sinatra, Ubuntu:Pro:20.04:LTS: ruby-sinatra, Ubuntu:22.04:LTS: ruby-sinatra, Ubuntu:24.04:LTS: ruby-sinatra</p> <p>Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ruby-sinatra, Ubuntu:Pro:18.04:LTS: ruby-sinatra, Ubuntu:Pro:20.04:LTS: ruby-sinatra, Ubuntu:22.04:LTS: ruby-sinatra, Ubuntu:24.04:LTS: ruby-sinatra</p> <p>Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21510