medium5.3
CVE-2018-7212
An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows.
Impact
An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sinatrarb | Sinatra | Versions 2.0.0, 2.0.1 |