Sequence Injection Vulnerability in Rack Web Server Versions
CVE-2022-30123
10CRITICAL
Key Information:
- Vendor
Rack Project
- Vendor
- CVE Published:
- 5 December 2022
What is CVE-2022-30123?
A sequence injection vulnerability exists in specific versions of Rack, which could allow for potential shell escapes in the Lint and CommonLogger components. This vulnerability affects versions prior to 2.0.9.1, 2.1.4.1, and 2.2.3.1, posing security risks for applications utilizing Rack for handling web requests. Proper mitigation and upgrading to patched versions are essential to secure your environment.
Affected Version(s)
https://github.com/rack/rack 2.0.9.1, 2.1.4.1, 2.2.3.1