PatchTheCVErack project vulnerabilities
Recent CVEs affecting rack project products. 2 tracked.
rack project has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-12-05. Highest priority: CVE-2022-30123 (score 65/100).
- CVE-2022-30123 CRITICAL 10.0 UPGRADE MITIGATE A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possi
- CVE-2022-30122 HIGH 7.5 UPGRADE MITIGATE A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart par
FAQ
How do I fix rack project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rack project being exploited right now?
None of the tracked rack project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rack project CVE should I patch first?
CVE-2022-30123 currently ranks highest (65/100): A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possi.