Fluid Attacks Database

Description

Rack vulnerable to Cross-site Scripting There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the scheme method on Rack::Request. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rubygems	rack	>=2.0.0 <2.0.6 \|\| >=0 <1.6.11	2.0.6, 1.6.11
debian 12	ruby-rack	>=0 <1.6.4-6	1.6.4-6
debian 13	ruby-rack	>=0 <1.6.4-6	1.6.4-6
debian 14	ruby-rack	>=0 <1.6.4-6	1.6.4-6

Aliases

1. CVE-2018-164712. NVD-2018-164713. OSV-2018-164714. OSV-DEBIAN-2018-164715. GCVE-2018-164716. lists.debian.org7. SECURITY-TRACKER-CVE-2018-16471

References

1. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2018-16471.yml2. https://groups.google.com/forum/#!topic/ruby-security-ann/NAalCee8n6o3. https://groups.google.com/forum/#!topic/rubyonrails-security/GKsAFT924Ag4. https://usn.ubuntu.com/4089-15. http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00032.html6. http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.