CVE-2018-1000119: CSRF
A flaw was found in rack-protection. Versions prior to 2.0.0.rc3 of the package are vulnerable to Timing Attack due to time-variable comparison of signatures. A malicious user can guess a valid signature one char at a time by considering the time it takes a signature validation to fail.
References: https://snyk.io/vuln/SNYK-RUBY-SINATRA-20470 https://snyk.io/vuln/SNYK-RUBY-RACKPROTECTION-20395
Patch: https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb
Other sources
Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-1000119?
CVE-2018-1000119 is a vulnerability in Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier that allows a timing attack on CSRF token checking, exposing signatures.
How severe is CVE-2018-1000119?
CVE-2018-1000119 has a severity rating of medium with a CVSS score of 5.9.
How can CVE-2018-1000119 be exploited?
CVE-2018-1000119 can be exploited through network connectivity to the Ruby application.
What is the fix for CVE-2018-1000119?
To fix CVE-2018-1000119, update the rack-protection package to version 2.0.0 or install version 1.5.5.
Where can I find more information about CVE-2018-1000119?
You can find more information about CVE-2018-1000119 at the following references: [link1], [link2], [link3].