Bug 1585218 (CVE-2018-11627)

Summary:	CVE-2018-11627 rubygem-sinatra: XSS in the 400 Bad Request page
Product:	[Other] Security Response	Reporter:	Andrej Nemec <anemec>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	anprice, apevec, bcourt, bhu, bkearney, cbillett, cfeist, chrisw, cluster-maint, cpelland, dajohnso, dominic, gblomqui, gmccullo, gtanzill, hhorak, hhudgeon, iboverma, idevat, jaruga, jfrey, jhardy, jjoyce, jmatthew, jorton, jpokorny, jprause, jross, jschluet, kbasil, lhh, lkundrak, lpeer, markmc, matt, mburns, mcressma, mmccune, mrike, obarenbo, ohadlevy, omular, rbryant, rchan, rhos-maint, roliveri, ruby-maint, sclewis, simaishi, sisharma, slinaber, srevivo, ssaha, tdecacqu, tojeline, tomckay, tsanders, valtri, vbellur, vondruch, williams
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	rubygem-sinatra 2.0.2	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-06-10 10:27:16 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1585220, 1585221, 1585278, 1585279, 1667140
Bug Blocks:	1585222

Description Andrej Nemec 2018-06-01 14:36:20 UTC

It was found that Sinatra is vulnerable to an XSS via the 400 Bad Request page that occurs upon a params parser exception.

Upstream issue:

https://github.com/sinatra/sinatra/issues/1428

Introduced by:

https://github.com/sinatra/sinatra/commit/8f8df53ff29938ace79b31097c27d9cdac803b44

Upstream patch:

https://github.com/sinatra/sinatra/commit/12786867d6faaceaec62c7c2cb5b0e2dc074d71a

Comment 1 Andrej Nemec 2018-06-01 14:37:15 UTC

Created rubygem-sinatra tracking bugs for this issue:

Affects: fedora-all [bug 1585221]

Comment 7 errata-xmlrpc 2019-02-07 23:00:32 UTC

This issue has been addressed in the following products:

  CloudForms Management Engine 5.10

Via RHSA-2019:0212 https://access.redhat.com/errata/RHSA-2019:0212

Comment 8 errata-xmlrpc 2019-02-12 13:58:51 UTC

This issue has been addressed in the following products:

  CloudForms Management Engine 5.9

Via RHSA-2019:0315 https://access.redhat.com/errata/RHSA-2019:0315