Most recent entries from all

ALSA-2022:4587 — Important: pcs security update

Affected: AlmaLinux:9: pcs, AlmaLinux:9: pcs-snmp

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * sinatra: path traversal possible outside of public_dir when serving static files (CVE-2022-29970) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-00294

BREW-mailcatcher-CVE-2022-29970 — sinatra does not validate expanded path matches

Affected: Homebrew: mailcatcher

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

EUVD-2026-258804

fkie_cve-2022-29970

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

GHSA-qp49-3pvw-x4m5 — sinatra does not validate expanded path matches

Affected: RubyGems: sinatra

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

gsd-2022-29970

RHSA-2022:2253 — Red Hat Security Advisory: pcs security update

sinatra: path traversal possible outside of public_dir when serving static files

RHSA-2022:4587 — Red Hat Security Advisory: pcs security update

sinatra: path traversal possible outside of public_dir when serving static files

SUSE-SU-2022:2046-1 — Security update for rubygem-sinatra

Security update for rubygem-sinatra

UBUNTU-CVE-2022-29970

Affected: Ubuntu:Pro:16.04:LTS: ruby-sinatra, Ubuntu:Pro:18.04:LTS: ruby-sinatra, Ubuntu:22.04:LTS: ruby-sinatra

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

WID-SEC-W-2022-0267 — Red Hat Enterprise Linux (pcs): Schwachstelle ermöglicht Offenlegung von Informationen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (pcs) ausnutzen, um Informationen offenzulegen.