Showing 1 - 6 of 6

CVE-2022-29970

Status Candidate

Overview

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

Red Hat Security Advisory 2022-8506-01: Posted Nov 17, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-8506-01 - Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool. Issues addressed include code execution, cross site scripting, denial of service, remote SQL injection, and traversal vulnerabilities.; tags | advisory, remote, denial of service, vulnerability, code execution, xss, sql injection; systems | linux, redhat; advisories | CVE-2021-37136, CVE-2021-37137, CVE-2022-22818, CVE-2022-24836, CVE-2022-25648, CVE-2022-29970, CVE-2022-32209, CVE-2022-34265; SHA-256 | 2d5699b272bf62135c49021ecfc5e70e3ef3e624c94ce2a33e3c23d5cd96ba6d; Download | Favorite | View

Red Hat Security Advisory 2022-4587-01: Posted Jun 3, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-4587-01 - The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Issues addressed include a traversal vulnerability.; tags | advisory; systems | linux, redhat; advisories | CVE-2022-29970; SHA-256 | 81eaaacbd7c62647d2d67700ebf8ae77158590eb7124e0b2709c13bba28eaadb; Download | Favorite | View

Red Hat Security Advisory 2022-4661-01: Posted May 19, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-4661-01 - The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Issues addressed include a traversal vulnerability.; tags | advisory; systems | linux, redhat; advisories | CVE-2022-29970; SHA-256 | c63af607bffae93fd5771540c0f2c2804a7ed455282fce04e0f020b1e5141565; Download | Favorite | View

Red Hat Security Advisory 2022-2253-01: Posted May 16, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-2253-01 - The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Issues addressed include a traversal vulnerability.; tags | advisory; systems | linux, redhat; advisories | CVE-2022-29970; SHA-256 | 9a32abd8b74de6f227a9c81959dd626384a6d2e0c13b263b8249086537088649; Download | Favorite | View

Red Hat Security Advisory 2022-2256-01: Posted May 16, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-2256-01 - The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Issues addressed include a traversal vulnerability.; tags | advisory; systems | linux, redhat; advisories | CVE-2022-29970; SHA-256 | d5cbde1ab6dba9a7e8dd48d44d6cd22c6eca211b66d54efec3cfba72adb1e1d8; Download | Favorite | View

Red Hat Security Advisory 2022-2255-01: Posted May 16, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-2255-01 - The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Issues addressed include a traversal vulnerability.; tags | advisory; systems | linux, redhat; advisories | CVE-2022-29970; SHA-256 | 653bf2d16cb84180d0c91773f8918c2ef8af28f562c664264e8dacc64c078df8; Download | Favorite | View

Page 1 of 1 Back 1 Next