rubygem-sinatra: XSS in the 400 Bad Request page
Published May 31, 2018
6.1
MEDIUMCVSS 3.0
EPSS 2.19%
Description
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.
Affected products
No data.
Configuration 2
- 4.6
- 4.7
No data.
CloudForms Management Engine 5.10
ansible-runner-0:1.1.2-2.el7ar
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ansible-tower-0:3.3.3-1.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
bubblewrap-0:0.1.7-1.el7
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
cfme-0:5.10.0.33-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
cfme-amazon-smartstate-0:5.10.0.33-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
cfme-appliance-0:5.10.0.33-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
cfme-gemset-0:5.10.0.33-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
dbus-api-service-0:1.0.1-5.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
dumb-init-0:1.2.0-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
erlang-0:19.3.6.7-1.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
google-compute-engine-0:2.0.0-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
google-config-0:2.0.0-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
httpd-configmap-generator-0:0.2.2-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
nginx-1:1.10.2-1.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-cluster-upgrade-0:1.1.8-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-disaster-recovery-0:1.1.2-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-engine-setup-0:1.1.5-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-image-template-0:1.1.8-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-infra-0:1.1.8-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-manageiq-0:1.1.12-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-repositories-0:1.1.2-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-roles-0:1.1.5-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-shutdown-env-0:1.0.0-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-v2v-conversion-host-0:1.6.3-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ovirt-ansible-vm-infra-0:1.1.10-1.el7ev
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
postgresql96-0:9.6.10-1PGDG.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
prince-0:9.0r2-10.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
pyOpenSSL-0:17.3.0-4.el7ost
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-bambou-0:3.0.1-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-colorama-0:0.3.7-2.el7ost
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-crypto-0:2.6.1-16.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-daemon-0:2.1.2-7.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-funcsigs-0:1.0.2-1.el7ost
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-future-0:0.16.0-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-lockfile-1:0.11.0-10.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-meld3-0:0.6.10-1.el7
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-mock-0:2.0.0-1.el7ost
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-pbr-0:3.1.1-2.el7ost
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-pexpect-0:4.6-1.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-psutil-0:5.4.3-2.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-ptyprocess-0:0.5.2-3.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-pylxca-0:2.1.1-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-pysocks-0:1.5.6-3.el7ost
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-requests-0:2.14.2-1.el7ost
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-requests-toolbelt-0:0.8.0-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-tabulate-0:0.8.2-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-urllib3-0:1.21.1-1.2.el7ost
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
python-vspk-0:5.3.2-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
qpid-proton-0:0.19.0-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rabbitmq-server-0:3.7.4-1.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rh-postgresql95-postgresql-pglogical-0:2.1.0-4.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rh-postgresql95-repmgr-0:4.0.6-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
ruby-0:2.4.5-90.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-bcrypt-0:3.1.12-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-ffi-0:1.9.25-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-hamlit-0:2.8.8-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-http_parser.rb-0:0.6.0-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-json-0:2.1.0-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-linux_block_device-0:0.2.1-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-memory_buffer-0:0.1.0-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-nio4r-0:2.3.1-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-nokogiri-0:1.8.2-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-ovirt-engine-sdk4-0:4.2.4-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-pg-0:0.18.4-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-puma-0:3.7.1-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-qpid_proton-0:0.22.0-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-redhat_access_cfme-0:2.0.3-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-redhat_access_lib-0:1.1.4-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-rugged-0:0.27.4-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-sqlite3-0:1.3.13-2.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-unf_ext-0:0.0.7.5-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
rubygem-websocket-driver-0:0.6.5-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
smem-0:1.4-1.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
supervisor-0:3.1.4-1.el7
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
wmi-0:1.3.14-7.el7cf
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10
wxGTK3-0:3.0.3-5.el7at
Fixed · RHSA-2019:0212
CloudForms Management Engine 5.9
cfme-0:5.9.8.1-1.el7cf
Fixed · RHSA-2019:0315
CloudForms Management Engine 5.9
cfme-amazon-smartstate-0:5.9.8.1-1.el7cf
Fixed · RHSA-2019:0315
CloudForms Management Engine 5.9
cfme-appliance-0:5.9.8.1-1.el7cf
Fixed · RHSA-2019:0315
CloudForms Management Engine 5.9
cfme-gemset-0:5.9.8.1-1.el7cf
Fixed · RHSA-2019:0315
CloudForms Management Engine 5.9
dbus-api-service-0:1.0.1-3.2.el7cf
Fixed · RHSA-2019:0315
Red Hat Ceph Storage 1.3
rubygem-sinatra
Not affected
Red Hat Enterprise Linux 6
pcs
Not affected
Red Hat Enterprise Linux 7
pcs
Not affected
Red Hat Enterprise Linux 8
pcs
Not affected
Red Hat Enterprise Linux 8
rubygem-sinatra
Not affected
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational Tools
rubygem-sinatra
Not affected
Red Hat Enterprise MRG 2
rubygem-sinatra
Not affected
Red Hat OpenStack Platform 10 (Newton) Operational Tools
rubygem-sinatra
Not affected
Red Hat OpenStack Platform 12 (Pike) Operational Tools
rubygem-sinatra
Not affected
Red Hat OpenStack Platform 8 (Liberty) Operational Tools
rubygem-sinatra
Not affected
Red Hat OpenStack Platform 9 (Mitaka) Operational Tools
rubygem-sinatra
Not affected
Red Hat Satellite 6
rubygem-sinatra
Not affected
Red Hat Software Collections
rh-ror42-rubygem-sinatra
Not affected
Red Hat Software Collections
rh-ror50-rubygem-sinatra
Not affected
Red Hat Storage 3
pcs
Not affected
Red Hat Storage 3
rubygem-sinatra
Not affected
Red Hat Subscription Asset Manager
rubygem-sinatra
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| CloudForms Management Engine 5.10 | ansible-runner-0:1.1.2-2.el7ar | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ansible-tower-0:3.3.3-1.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | bubblewrap-0:0.1.7-1.el7 | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | cfme-0:5.10.0.33-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | cfme-amazon-smartstate-0:5.10.0.33-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | cfme-appliance-0:5.10.0.33-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | cfme-gemset-0:5.10.0.33-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | dbus-api-service-0:1.0.1-5.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | dumb-init-0:1.2.0-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | erlang-0:19.3.6.7-1.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | google-compute-engine-0:2.0.0-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | google-config-0:2.0.0-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | httpd-configmap-generator-0:0.2.2-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | nginx-1:1.10.2-1.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-cluster-upgrade-0:1.1.8-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-disaster-recovery-0:1.1.2-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-engine-setup-0:1.1.5-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-image-template-0:1.1.8-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-infra-0:1.1.8-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-manageiq-0:1.1.12-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-repositories-0:1.1.2-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-roles-0:1.1.5-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-shutdown-env-0:1.0.0-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-v2v-conversion-host-0:1.6.3-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ovirt-ansible-vm-infra-0:1.1.10-1.el7ev | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | postgresql96-0:9.6.10-1PGDG.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | prince-0:9.0r2-10.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | pyOpenSSL-0:17.3.0-4.el7ost | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-bambou-0:3.0.1-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-colorama-0:0.3.7-2.el7ost | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-crypto-0:2.6.1-16.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-daemon-0:2.1.2-7.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-funcsigs-0:1.0.2-1.el7ost | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-future-0:0.16.0-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-lockfile-1:0.11.0-10.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-meld3-0:0.6.10-1.el7 | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-mock-0:2.0.0-1.el7ost | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-pbr-0:3.1.1-2.el7ost | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-pexpect-0:4.6-1.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-psutil-0:5.4.3-2.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-ptyprocess-0:0.5.2-3.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-pylxca-0:2.1.1-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-pysocks-0:1.5.6-3.el7ost | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-requests-0:2.14.2-1.el7ost | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-requests-toolbelt-0:0.8.0-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-tabulate-0:0.8.2-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-urllib3-0:1.21.1-1.2.el7ost | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | python-vspk-0:5.3.2-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | qpid-proton-0:0.19.0-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rabbitmq-server-0:3.7.4-1.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rh-postgresql95-postgresql-pglogical-0:2.1.0-4.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rh-postgresql95-repmgr-0:4.0.6-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | ruby-0:2.4.5-90.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-bcrypt-0:3.1.12-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-ffi-0:1.9.25-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-hamlit-0:2.8.8-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-http_parser.rb-0:0.6.0-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-json-0:2.1.0-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-linux_block_device-0:0.2.1-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-memory_buffer-0:0.1.0-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-nio4r-0:2.3.1-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-nokogiri-0:1.8.2-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-ovirt-engine-sdk4-0:4.2.4-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-pg-0:0.18.4-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-puma-0:3.7.1-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-qpid_proton-0:0.22.0-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-redhat_access_cfme-0:2.0.3-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-redhat_access_lib-0:1.1.4-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-rugged-0:0.27.4-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-sqlite3-0:1.3.13-2.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-unf_ext-0:0.0.7.5-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | rubygem-websocket-driver-0:0.6.5-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | smem-0:1.4-1.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | supervisor-0:3.1.4-1.el7 | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | wmi-0:1.3.14-7.el7cf | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.10 | wxGTK3-0:3.0.3-5.el7at | Fixed | RHSA-2019:0212 |
| CloudForms Management Engine 5.9 | cfme-0:5.9.8.1-1.el7cf | Fixed | RHSA-2019:0315 |
| CloudForms Management Engine 5.9 | cfme-amazon-smartstate-0:5.9.8.1-1.el7cf | Fixed | RHSA-2019:0315 |
| CloudForms Management Engine 5.9 | cfme-appliance-0:5.9.8.1-1.el7cf | Fixed | RHSA-2019:0315 |
| CloudForms Management Engine 5.9 | cfme-gemset-0:5.9.8.1-1.el7cf | Fixed | RHSA-2019:0315 |
| CloudForms Management Engine 5.9 | dbus-api-service-0:1.0.1-3.2.el7cf | Fixed | RHSA-2019:0315 |
| Red Hat Ceph Storage 1.3 | rubygem-sinatra | Not affected | n/a |
| Red Hat Enterprise Linux 6 | pcs | Not affected | n/a |
| Red Hat Enterprise Linux 7 | pcs | Not affected | n/a |
| Red Hat Enterprise Linux 8 | pcs | Not affected | n/a |
| Red Hat Enterprise Linux 8 | rubygem-sinatra | Not affected | n/a |
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational Tools | rubygem-sinatra | Not affected | n/a |
| Red Hat Enterprise MRG 2 | rubygem-sinatra | Not affected | n/a |
| Red Hat OpenStack Platform 10 (Newton) Operational Tools | rubygem-sinatra | Not affected | n/a |
| Red Hat OpenStack Platform 12 (Pike) Operational Tools | rubygem-sinatra | Not affected | n/a |
| Red Hat OpenStack Platform 8 (Liberty) Operational Tools | rubygem-sinatra | Not affected | n/a |
| Red Hat OpenStack Platform 9 (Mitaka) Operational Tools | rubygem-sinatra | Not affected | n/a |
| Red Hat Satellite 6 | rubygem-sinatra | Not affected | n/a |
| Red Hat Software Collections | rh-ror42-rubygem-sinatra | Not affected | n/a |
| Red Hat Software Collections | rh-ror50-rubygem-sinatra | Not affected | n/a |
| Red Hat Storage 3 | pcs | Not affected | n/a |
| Red Hat Storage 3 | rubygem-sinatra | Not affected | n/a |
| Red Hat Subscription Asset Manager | rubygem-sinatra | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AV:N/AC:M/Au:N/C:N/I:P/A:N
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
Score over time
2021–2026- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v5
Percentile over time
- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v5
Table of values (15 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 2.19% (0.02193) | 81.82th | v5 (v2026.06.15) |
| Jun 15, 2026 | 2.21% (0.02212) | 80.23th | v5 (v2026.06.15) |
| Jul 20, 2024 | 0.11% (0.00111) | 44.85th | v3 (v2023.03.01) |
| Jul 8, 2023 | 0.11% (0.00111) | 43.38th | v3 (v2023.03.01) |
| May 25, 2023 | 0.15% (0.00152) | 50.15th | v3 (v2023.03.01) |
| May 8, 2023 | 0.14% (0.00143) | 48.69th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.10% (0.00105) | 41.07th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.02% (0.01018) | 40.69th | v2 (v2022.01.01) |
| Sep 10, 2022 | 1.02% (0.01018) | 38.88th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.02% (0.01018) | 36.86th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.02% (0.01018) | 19.50th | v2 (v2022.01.01) |
| Feb 3, 2022 | 1.04% (0.01040) | 28.32th | v1 |
| Jan 6, 2022 | 1.04% (0.01040) | 27.69th | v1 |
| Sep 1, 2021 | 1.04% (0.01040) | 64.49th | v1 |
| Apr 14, 2021 | 1.04% (0.01040) | 0.00th | v1 |
References (10)
- https://access.redhat.com/errata/RHSA-2019:0212 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/errata/RHSA-2019:0315 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2018-11627 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1585218 Issue Tracking
- https://github.com/advisories/GHSA-mq35-wqvf-r23c Advisory
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sinatra/CVE-2018-11627.yml
- https://github.com/sinatra/sinatra/commit/12786867d6faaceaec62c7c2cb5b0e2dc074d71a x_refsource_MISCPatchThird Party Advisory
- https://github.com/sinatra/sinatra/issues/1428 x_refsource_MISCExploitThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-11627
- https://www.cve.org/CVERecord?id=CVE-2018-11627
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2019:0212 | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| https://access.redhat.com/errata/RHSA-2019:0315 | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| https://access.redhat.com/security/cve/CVE-2018-11627 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1585218 | Issue Tracking | |
| https://github.com/advisories/GHSA-mq35-wqvf-r23c | Advisory | |
| https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sinatra/CVE-2018-11627.yml | ||
| https://github.com/sinatra/sinatra/commit/12786867d6faaceaec62c7c2cb5b0e2dc074d71a | x_refsource_MISCPatchThird Party Advisory | |
| https://github.com/sinatra/sinatra/issues/1428 | x_refsource_MISCExploitThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2018-11627 | ||
| https://www.cve.org/CVERecord?id=CVE-2018-11627 |
Change history (0)
No recorded changes yet.