Your submission was sent successfully! Close

USN-4571-1: rack-cors vulnerability

05 October 2020

rack-cors would allow unintended access to files over the network.



  • ruby-rack-cors - provides support for Cross-Origin Resource Sharing (CORS) for Rack compatible web applications


It was discovered that rack-cors did not properly handle relative file
paths. An attacker could use this vulnerability to access arbitrary files.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.04

In general, a standard system update will make all the necessary changes.