CVE-2018-16471

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Nov 13, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-164727.5A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are CVE-2018-164735.3A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.CVE-2018-164746.1A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.CVE-2018-164757.5A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server.CVE-2018-164767.5A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to d CVE-2018-164776.5A bypass vulnerability in Active Storage >= 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the `content-dispos CVE-2018-164785.3A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.CVE-2018-164797.5Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes CVE-2018-16487.5IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive info CVE-2018-164806.1A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of san CVE-2018-164816.1A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the abs CVE-2018-164827.5A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive informa