Directory Traversal Vulnerability in Rack Library by Ruby
CVE-2020-8161
Key Information:
- Vendor
Rack Project
- Vendor
- CVE Published:
- 2 July 2020
What is CVE-2020-8161?
A directory traversal vulnerability exists in the Rack library, specifically in versions prior to 2.2.0. This issue allows attackers to manipulate requests to access files and directories that should be restricted, potentially leading to unauthorized information disclosure. The flaw is particularly significant in the Rack::Directory application, where it can be exploited to gain sensitive data from the server filesystem. Users are advised to upgrade to secure versions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
https://github.com/rack/rack Fixed in 2.1.3, >= 2.2.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
