CVE-2018-1000119 rack-protection gem timing attack vulnerability when validating CSRF token
Attackers can bypass CSRF protection in Sinatra applications via timing attacks on token checks, potentially enabling unauthorized actions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-1000119?
CVE-2018-1000119 is a medium-severity vulnerability in n/a, published on 7 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.
Weakness: CWE-203
Which versions are affected by CVE-2018-1000119?
4 open source packages ship an affected version, including rack-protection. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
rack-protection RubyGems | All versions | 1.5.5 |
rack-protection RubyGems | All versions | 1.5.5 |
rack-protection RubyGems | From 2.0.0.beta1 | 2.0.0 |
rack-protection RubyGems | From 2.0.0.beta1 | 2.0.0 |
Products include Sinatrarb Rack-Protection.
How do I fix CVE-2018-1000119?
Upgrade rack-protection to a fixed version for your release line: 1.5.5 or 2.0.0.
Is CVE-2018-1000119 being exploited?
There is no known exploitation of CVE-2018-1000119 in the wild and no public exploit code.
Sources
Also known as DSA-4247-1, GHSA-688c-3x49-6rqj, UBUNTU-CVE-2018-1000119.