Rack-Cors Project Rack-Cors
2 CVEs affecting Rack-Cors Project Rack-Cors. Latest disclosed: 2019-11-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11173 | High | 8.8 | 2017-07-13 | Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended t… |
CVE-2019-18978 | Medium | 5.3 | 2019-11-14 | An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources be… |