CVE-2018-16471
Fixed in a distro release EPSS 2%
There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.
Products: Rack
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | rack | 2.0.6 |
| RubyGems | rack | 1.6.11 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ruby-rack | 1.6.4-6 |
| Debian 13 | ruby-rack | 1.6.4-6 |
| Debian 14 | ruby-rack | 1.6.4-6 |
| Debian 8 | ruby-rack | 1.5.2-3+deb8u2 |
| SUSE Enterprise Storage 4 | rubygem-rack | 1.6.11-3.3.1 |
| SUSE Linux Enterprise High Availability Extension 15 | rubygem-rack | 2.0.8-3.3.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | rubygem-rack | 2.0.8-3.3.1 |
| SUSE OpenStack Cloud 7 | rubygem-rack | 1.6.11-3.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-rack | 1.6.11-3.3.1 |
| Ubuntu 16.04 LTS | ruby-rack | 1.6.4-3ubuntu0.1 |
| Ubuntu 18.04 LTS | ruby-rack | 1.6.4-4ubuntu0.1 |
| openSUSE Leap 15.1 | rubygem-rack | 2.0.8-lp151.3.3.1 |
| openSUSE Tumbleweed | ruby3.2-rubygem-rack | 3.0.7-1.2 |
| openSUSE Tumbleweed | ruby3.2-rubygem-rack-2.2 | 2.2.7-1.1 |
| openSUSE Tumbleweed | rubygem-rack | 2.2.3.1-1.1 |
| openSUSE Tumbleweed | rubygem-rack | 3.1.18-1.3 |
| openSUSE Tumbleweed | rubygem-rack | 3.1.12-1.1 |
| openSUSE Tumbleweed | rubygem-rack | 3.0.9.1-1.1 |
| openSUSE Tumbleweed | rubygem-rack-2.2 | 2.2.22-1.1 |
| openSUSE Tumbleweed | rubygem-rack-2.2 | 2.2.11-1.1 |
| openSUSE Tumbleweed | rubygem-rack-2.2 | 2.2.8.1-1.1 |
| openSUSE Tumbleweed | rubygem-rack-2.2 | 2.2.4-1.1 |