Skip to content

Commit abe5f92

Browse files
Added patched_versions to CVE 2024-21510 (#838)
--------- Co-authored-by: Postmodern <[email protected]>
1 parent 152f634 commit abe5f92

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

gems/sinatra/CVE-2024-21510.yml

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,12 +17,16 @@ description: |
1717
handling the X-Forwarded-Host header, attackers can potentially
1818
exploit Cache Poisoning or Routing-based SSRF.
1919
cvss_v3: 5.4
20-
notes: Never patched
20+
patched_versions:
21+
- ">= 4.1.0"
2122
related:
2223
url:
2324
- https://nvd.nist.gov/vuln/detail/CVE-2024-21510
2425
- https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-6483832
25-
- https://github.com/sinatra/sinatra/pull/2010
26+
- https://github.com/advisories/GHSA-hxx2-7vcw-mqr3
2627
- https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L319
2728
- https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L323C1-L343C17
28-
- https://github.com/advisories/GHSA-hxx2-7vcw-mqr3
29+
- https://github.com/sinatra/sinatra/issues/2052
30+
- https://github.com/sinatra/sinatra/pull/2010
31+
- https://github.com/sinatra/sinatra/pull/2053
32+
- https://github.com/sinatra/sinatra/commit/cd3e00de20ddaff34ea30f7a74a7b9dad189d1d8

0 commit comments

Comments
 (0)