CVE-2024-27456

Name of the Vulnerable Software and Affected Versions rack-cors (aka Rack CORS Middleware) version 2.0.1

Description The issue is related to incorrectly used standard permissions in the Rack CORS Middleware, which may allow an attacker to impact the integrity, confidentiality, and availability of information. The .rb files have 0666 permissions.

Recommendations For version 2.0.1, consider changing the permissions of the .rb files to a more secure setting to prevent potential exploitation. As a temporary workaround, restrict access to the .rb files until a patch is available.