CVE-2024-27456
Published: 26 February 2024
rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions for the .rb files.
Notes
| Author | Note |
|---|---|
| alexmurray | Only affects the rack-cors gem, not the ruby-rack-cors package as shipped in Ubuntu |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
ruby-rack-cors Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
|
| focal |
Not vulnerable
|
|
| jammy |
Not vulnerable
|
|
| mantic |
Not vulnerable
|
|
| noble |
Not vulnerable
|
|
| trusty |
Ignored
(end of standard support)
|
|
| upstream |
Not vulnerable
|
|
| xenial |
Not vulnerable
|