What is GHSA-h29f-7f56-j8wh?

GHSA-h29f-7f56-j8wh is a security advisory published by GitHub Security Advisories with Medium severity. Sinatra Path Traversal vulnerability

Which CVE IDs does GHSA-h29f-7f56-j8wh cover?

GHSA-h29f-7f56-j8wh covers the following CVE IDs: CVE-2018-7212. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h29f-7f56-j8wh?

GHSA-h29f-7f56-j8wh has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-h29f-7f56-j8wh?

GHSA-h29f-7f56-j8wh affects 1 product, including: rubygems/sinatra:\u003e= 2.0.0.beta1, \u003c 2.0.1.

GHSA-h29f-7f56-j8whMediumCVSS 5.3

Sinatra Path Traversal vulnerability

Vendor

GitHub Security Advisories

Published

February 20, 2018

Last Modified

January 26, 2023

🔗 CVE IDs covered (1)

CVE-2018-7212 →

📋 Description

An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.

🎯 Affected products1

rubygems/sinatra:>= 2.0.0.beta1, < 2.0.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2018-7212
https://github.com/sinatra/sinatra/pull/1379
https://github.com/sinatra/sinatra/commit/6ad721abcfe36334108dcdd05d046c361e1b7a9c
https://github.com/advisories/GHSA-h29f-7f56-j8wh