CVE-2018-1000119

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-07 · updated 2026-06-17
Weakness: CWE-203

Description

Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.

Affected products

Sinatrarb Rack-Protection: before 1.5.5; 2.0.0-rc1, 2.0.0-rc2, 2.0.0-rc3 — fixed in 1.5.5

How to fix

Upgrade to a fixed version: Sinatrarb Rack-Protection 1.5.5. Check the vendor advisory for mitigations.

References

https://access.redhat.com/errata/RHSA-2018:1060
https://github.com/sinatra/rack-protection/pull/98
https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb#commitcomment-27964109
https://www.debian.org/security/2018/dsa-4247
https://access.redhat.com/errata/RHSA-2018:1060
https://github.com/sinatra/rack-protection/pull/98
https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb#commitcomment-27964109
https://www.debian.org/security/2018/dsa-4247

Get alerted when CVE-2018-1000119 or the next vulnerability affects your stack