https://github.com/rack/rack
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-27530 | 3.0.4.2, 2.2.6.3, 2.1.4.3, 2.0.9.3 | A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could al | HIGH 7.5 | 1.8 % | ||
| CVE-2022-44572 | 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1 | A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an a | HIGH 7.5 | 1.6 % | ||
| CVE-2022-44571 | 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1 | There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. | HIGH 7.5 | 1.5 % | ||
| CVE-2022-44570 | 2.0.9.2, 2.1.4.2, 2.2.4.2, 3.0.0.1 | A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can cause the Range head | HIGH 7.5 | 1.6 % | ||
| CVE-2022-30123 | 2.0.9.1, 2.1.4.1, 2.2.3.1 | A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint a | CRITICAL 10.0 | 2.0 % | ||
| CVE-2022-30122 | 2.0.9.1, 2.1.4.1, 2.2.3.1 | A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack. | HIGH 7.5 | 2.2 % | ||
| CVE-2020-8161 | Fixed in 2.1.3, >= 2.2.0 | A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Di | HIGH 8.6 | 3.4 % | ||
| CVE-2020-8184 | rack >= 2.2.3, rack >= 2.1.4 | A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possib | HIGH 7.5 | 2.9 % |