Security Advisory
CVE-2019-18978
5.3
MEDIUM
Vulnerability Description
An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.
Published Date
November 14, 2019
Official Source
NIST NVD Advisory