CVE Vulnerabilities

CVE-2022-30123

Published: Dec 05, 2022 | Modified: Dec 08, 2023
CVSS 3.x
10
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.

Affected Software

Name Vendor Start Version End Version
Rack Rack_project * 2.0.9.1 (excluding)
Rack Rack_project 2.1.0 (including) 2.1.4.1 (excluding)
Rack Rack_project 2.2.0 (including) 2.2.3.1 (excluding)

References