{"schemaVersion":3,"id":"CVE-2024-21510","aliases":["RHSA-2024:10987","UBUNTU-CVE-2024-21510","DEBIAN-CVE-2024-21510","CGA-4q92-78x4-986c","CGA-5829-h345-8h9v","CGA-7jm8-ppph-jqhg","CGA-9j29-hpxw-v26v","CGA-fqmr-6h4f-5c74","CGA-j99x-mf59-7vm6","CGA-rg6v-4h39-rcvj","CGA-xqcv-j6vp-9qfx","CGA-3xgq-646q-v463","CGA-4gxw-42c4-g6fv","CGA-59c5-7wmf-8x43","CGA-5jrh-2285-8xmv","CGA-5pf4-fc4p-j87w","CGA-6rr6-3w59-f637","CGA-8j4v-88vc-9v66","CGA-cjp5-cgp4-vhr6","CGA-cw2m-37vh-4pgx","CGA-fq6q-q5f5-x922","CGA-gvmv-79cq-g2m4","CGA-jfj9-73wq-52f6","CGA-jq6c-x5g9-32xf","CGA-m757-c4r5-3pc8","CGA-m969-x246-9pwr","CGA-mv78-q7c2-4q5g","CGA-p397-q968-35v8","CGA-p88p-c9c4-jjv9","GHSA-hxx2-7vcw-mqr3","CGA-q8vv-xq83-q4q2","CGA-qmc3-c967-x4fp","CGA-qrwr-77jv-2g9p","CGA-r7h6-pmmm-m573","CGA-r9h9-mm7v-vg9q","CGA-vwhf-8pvx-qxfp","CGA-w6fj-jvq5-mw9x","CGA-xpjh-x8wp-q2c8"],"status":"published","duplicateOf":null,"title":null,"description":"Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.","dates":{"published":"2024-11-01T05:00:04.821Z","modified":"2024-11-18T12:19:21.911Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.4,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Rubygems","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Rubygems","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","exploitability":7.2,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00494,"percentile":0.41108,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.027999999999999987,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00466},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00494,"percentile":0.41108}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00466,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00494,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00494,"percentile":0.41108}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-807","name":"Reliance on Untrusted Inputs in a Security Decision","description":"The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/807.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-cng-18.2","name":"gitlab-cng-18.2","label":"gitlab-cng-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-cng-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-cng-18.9","name":"gitlab-cng-18.9","label":"gitlab-cng-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-cng-18.9","purlType":"apk","versions":[{"text":"< 18.9.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.10","name":"gitlab-exporter-18.10","label":"gitlab-exporter-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.11","name":"gitlab-exporter-18.11","label":"gitlab-exporter-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.11","purlType":"apk","versions":[{"text":"< 18.11.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.5-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.6","name":"gitlab-exporter-18.6","label":"gitlab-exporter-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.7","name":"gitlab-exporter-18.7","label":"gitlab-exporter-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.8","name":"gitlab-exporter-18.8","label":"gitlab-exporter-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-18.9","name":"gitlab-exporter-18.9","label":"gitlab-exporter-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-18.9","purlType":"apk","versions":[{"text":"< 18.9.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.0","name":"gitlab-exporter-19.0","label":"gitlab-exporter-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.0","purlType":"apk","versions":[{"text":"< 19.0.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.1","name":"gitlab-exporter-19.1","label":"gitlab-exporter-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.2","name":"gitlab-exporter-19.2","label":"gitlab-exporter-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-exporter-19.3","name":"gitlab-exporter-19.3","label":"gitlab-exporter-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-exporter-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-logger-18.1","name":"gitlab-logger-18.1","label":"gitlab-logger-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-logger-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-logger-18.2","name":"gitlab-logger-18.2","label":"gitlab-logger-18.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-logger-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8-with-output-opensearch","name":"logstash-8-with-output-opensearch","label":"logstash-8-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.16.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.16.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.2-sinatra","name":"ruby3.2-sinatra","label":"ruby3.2-sinatra","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.2-sinatra","purlType":"apk","versions":[{"text":"< 4.1.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ruby3.3-sinatra","name":"ruby3.3-sinatra","label":"ruby3.3-sinatra","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ruby3.3-sinatra","purlType":"apk","versions":[{"text":"< 4.1.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"gitlab-cng-18.2","name":"gitlab-cng-18.2","label":"gitlab-cng-18.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/gitlab-cng-18.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-8-with-output-opensearch","name":"logstash-8-with-output-opensearch","label":"logstash-8-with-output-opensearch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-8-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.16.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.16.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.2-sinatra","name":"ruby3.2-sinatra","label":"ruby3.2-sinatra","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.2-sinatra","purlType":"apk","versions":[{"text":"< 4.1.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ruby3.3-sinatra","name":"ruby3.3-sinatra","label":"ruby3.3-sinatra","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ruby3.3-sinatra","purlType":"apk","versions":[{"text":"< 4.1.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.0-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"ruby-sinatra","name":"ruby-sinatra","label":"ruby-sinatra","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ruby-sinatra","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 4.1.1-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 4.1.1-2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"ruby-sinatra","name":"ruby-sinatra","label":"ruby-sinatra","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/ruby-sinatra","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"RubyGems","product":"sinatra","name":"sinatra","label":"sinatra","ecosystem":"RubyGems","cpePart":null,"purl":"pkg:gem/sinatra","purlType":"gem","versions":[{"text":"< 4.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.0","eol":null,"hubHref":null},{"vendor":"redhat","product":"pcs","name":"pcs","label":"pcs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/pcs","purlType":"rpm","versions":[{"text":"< 0:0.10.18-2.el8_10.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.10.18-2.el8_10.3","eol":null,"hubHref":null},{"vendor":"redhat","product":"pcs-snmp","name":"pcs-snmp","label":"pcs-snmp","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/pcs-snmp","purlType":"rpm","versions":[{"text":"< 0:0.10.18-2.el8_10.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.10.18-2.el8_10.3","eol":null,"hubHref":null}],"affectedCount":26,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-6483832","label":"security.snyk.io/vuln/SNYK-RUBY-SINATRA-6483832","hostname":"security.snyk.io","tags":["ARTICLE","REPORT","WEB"]},{"url":"https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb%23L319","label":"github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb%23L319","hostname":"github.com","tags":["ARTICLE","WEB"]},{"url":"https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb%23L323C1-L343C17","label":"github.com/sinatra/…","hostname":"github.com","tags":["ARTICLE","WEB"]},{"url":"https://github.com/sinatra/sinatra/pull/2010","label":"github.com/sinatra/sinatra/pull/2010","hostname":"github.com","tags":["ARTICLE","FIX","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10987","label":"access.redhat.com/errata/RHSA-2024:10987","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323117","label":"bugzilla.redhat.com/show_bug.cgi?id=2323117","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10987.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10987.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21510","label":"access.redhat.com/security/cve/CVE-2024-21510","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21510","label":"www.cve.org/CVERecord?id=CVE-2024-21510","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21510","label":"nvd.nist.gov/vuln/detail/CVE-2024-21510","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-21510","label":"ubuntu.com/security/CVE-2024-21510","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://github.com/sinatra/sinatra/pull/2053#issuecomment-2486996349","label":"github.com/sinatra/sinatra/pull/2053","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/rack/rack/commit/58eed3015d89249a3c48d144bbeabb01f69ea696","label":"github.com/rack/rack/commit/58eed3015d89249a3c48d144bbeabb01f69ea696","hostname":"github.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-21510","label":"security-tracker.debian.org/tracker/CVE-2024-21510","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/advisories/GHSA-hxx2-7vcw-mqr3","label":"github.com/advisories/GHSA-hxx2-7vcw-mqr3","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sinatra/CVE-2024-21510.yml","label":"github.com/rubysec/ruby-advisory-db/blob/master/gems/sinatra/CVE-2024-21510.yml","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/sinatra/sinatra","label":"github.com/sinatra/sinatra","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L319","label":"github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L323C1-L343C17","label":"github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md#410--2024-11-18","label":"github.com/sinatra/sinatra/blob/main/CHANGELOG.md","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-83X2-35X7-32XC","CGA-P4RG-C3HP-PHW6","CGA-Q9JM-PXQ6-8H9V","CGA-R7Q7-RPV3-FJ67","CGA-W8V7-5QHP-RG46"]},"timeline":[{"kind":"published","date":"2024-11-01T05:00:04.821Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-11-18T12:19:21.911Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:39:24.683Z","stale":false,"partial":false}}