GHSA-8cgq-6mh2-7j6v

    Dashboard / Vulnerabilities / GHSA-8cgq-6mh2-7j6v

    GHSA-8cgq-6mh2-7j6v

    Published: 4 Mar 2025Last Modified: 10 Sept 2026

    Summary: Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection

    Details: ## Summary `Rack::Sendfile` can be exploited by crafting input that includes newline characters to manipulate log entries. ## Details The `Rack::Sendfile` middleware logs unsanitized header values from the `X-Sendfile-Type` header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. ## Impact This vulnerability can distort log files, obscure attack traces, and complicate security auditing. ## Mitigation - Update to the latest version of Rack, or - Remove usage of `Rack::Sendfile`.

    References: https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v, https://nvd.nist.gov/vuln/detail/CVE-2025-27111, https://github.com/rack/rack/commit/803aa221e8302719715e224f4476e438f2531a53, https://github.com/rack/rack/commit/aeac570bb8080ca7b53b7f2e2f67498be7ebd30b, https://github.com/rack/rack/commit/b13bc6bfc7506aca3478dc5ac1c2ec6fc53f82a3, https://github.com/rack/rack, https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-27111.yml, https://lists.debian.org/debian-lts-announce/2025/03/msg00016.html

    Affected packages

    Package

    Name: rack

    Purl: pkg:gem/rack

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.2.12

    Affected versions

    0.1.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-8cgq-6mh2-7j6v | CVE-DB