CVE:CVE-2019-18978
CNNVD:CNNVD-201911-1002
rack-cors gem for Ruby 1.0.4之前版本中存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。
solution:Upgrade rack-cors_project rack-cors to a higher version than 1.0.4,and avoid the version (,1.0.4); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,and avoid the version 16.04