description: A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure.
problem types: Information Exposure Through Directory Listing (CWE-548)
affected:
{
vendor: n/a
product: https://github.com/rack/rack
versions:
version: Fixed in 2.1.3, >= 2.2.0, status: affected
}