Vendor
Rack
13 known vulnerabilities in products by Rack, 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2020-8161 | Https://github.com/rack/rack: Exposure of Information Through Directory Listing | 8.6 | |
| Critical | CVE-2022-30123 | Https://github.com/rack/rack: Improper Neutralization of Escape, Meta, or Control Sequences | 10.0 | |
| High | CVE-2020-8184 | Https://github.com/rack/rack: Reliance on Cookies without Validation and Integrity Checking in a Security Decision | 7.5 | |
| High | CVE-2022-30122 | Https://github.com/rack/rack: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2018-16470 | Rack: Uncontrolled Resource Consumption | 7.5 | |
| Medium | CVE-2018-16471 | Rack: Cross-site Scripting | 6.1 | |
| Not rated | CVE-2015-3225 | Rack Project Rack: Denial of Service | — | |
| Not rated | CVE-2013-0263 | Rack Project Rack: Privilege Escalation | — | |
| Not rated | CVE-2011-5036 | Rack Project Rack: Denial of Service | — | |
| Not rated | CVE-2013-0183 | Rack Project Rack: Denial of Service | — | |
| Not rated | CVE-2013-0262 | Rack Project Rack: Path Traversal | — | |
| Not rated | CVE-2012-6109 | Rack Project Rack: Infinite Loop | — | |
| Not rated | CVE-2013-0184 | Rack Project Rack: Denial of Service | — |
Products
| Rack | 13 | 0 |