GCVE-110-MAGEIA-2023-29

Advisory Published

Vulnetix · Advisory published February 7, 2023

Potential reflected file download (RFD) vulnerability in ruby-sinatra, a Ruby library for writing HTTP applications. A Content-Disposition HTTP header was being incorrectly derived from a potentially user-supplied filename. (CVE-2022-45442)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	ruby-sinatra	0 (affected), 2.0.8.1-1.2.mga8 (unaffected)	—

References

Updated ruby-sinatra packages fix security vulnerability

advisory

Updated ruby-sinatra packages fix security vulnerability

issue

Updated ruby-sinatra packages fix security vulnerability

url

Browse GCVE Records

879 records in the GCVE database · Updated October 29, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON