CVE-2018-11627

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception

published May 31, 2018

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02159 · 82.1th percentile
Published
2018-05-31T19:00Z
EPSS history
Timeline
  • 31 MAY 19:00Z
    Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception
    cvelistv5