CVE-2018-7212: Sinatrarb Sinatra

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.

Affected products

• Sinatrarb Sinatra: version 2.0.0 only; version 2.0.1 only

Published 2018-02-18. Last modified 2026-06-17.