Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Ajmilazzo

#29400of 56,330
9.1Total CVSS
Vulnerabilities · 1
PT-2024-1854
9.1
2024-02-26
Rack-Cors · Rack-Cors · CVE-2024-27456
**Name of the Vulnerable Software and Affected Versions** rack-cors (aka Rack CORS Middleware) version 2.0.1 **Description** The issue is related to incorrectly used standard permissions in the Rack CORS Middleware, which may allow an attacker to impact the integrity, confidentiality, and availability of information. The .rb files have 0666 permissions. **Recommendations** For version 2.0.1, consider changing the permissions of the .rb files to a more secure setting to prevent potential exploitation. As a temporary workaround, restrict access to the .rb files until a patch is available.