Mittel 5.3Linux-Server
CVE-2026-125110
rack: rack: Security header bypass via unnormalized dot segments in request paths
rack
## Summary `Rack::Static` normalizes the request path with `Utils.clean_path_info` when deciding which file to serve, but matches `header_rules` against a path that is only URL-decoded. A request containing dot segments, raw or percent-encoded, is served the normalized target file while the header rules for that file's location are not applied. This allows an attacker to receive a protected static file without the security headers configured for it. ## Details…
9. Nov 2026
Original bei Red Hat öffnen