CVE-2022-29970

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

Published: 2022-05-02 · CVSS: Unscored

Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7