{
  "cveId": "CVE-2025-27610",
  "url": "https://patchblox.com/security/cve/CVE-2025-27610",
  "summary": "CVE-2025-27610 is fixed in 3 products on 1 platform, first by ruby-rack 1.6.4-4ubuntu0.2\u002Besm7, released March 10, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "ruby-rack: Rack provides an interface for developing web applications in Ruby",
  "description": "Rack provides an interface for developing web applications in Ruby. Priorto versions 2.2.13, 3.0.14, and 3.1.12, \u0060Rack::Static\u0060 can serve filesunder the specified \u0060root:\u0060 even if \u0060urls:\u0060 are provided, which may exposeother files under the specified \u0060root:\u0060 unexpectedly. The vulnerabilityoccurs because \u0060Rack::Static\u0060 does not properly sanitize user-suppliedpaths before serving files. Specifically, encoded path traversal sequencesare not correctly validated, allowing attackers to access files outside thedesignated static file directory. By exploiting this vulnerability, anattacker can gain access to all files under the specified \u0060root:\u0060directory, provided they are able to determine then path of the file.Versions 2.2.13, 3.0.14, and 3.1.12 contain a patch for the issue. Othermitigations include removing usage of \u0060Rack::Static\u0060, or ensuring that\u0060root:\u0060 points at a directory path which only contains files which shouldbe accessed publicly. It is likely that a CDN or similar static file serverwould also mitigate the issue.",
  "published": "2025-03-10T16:15:00Z",
  "severity": "Medium",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.01173,
  "epssPercentile": 0.67703,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2.2.13-1~deb12u1",
      "fix": "DEBIAN-CVE-2025-27610",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-27610",
      "released": "2025-03-10T23:15:35Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.1.12-1",
      "fix": "DEBIAN-CVE-2025-27610",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-27610",
      "released": "2025-03-10T23:15:35Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Debian 14",
      "fixedVersion": "3.1.12-1",
      "fix": "DEBIAN-CVE-2025-27610",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-27610",
      "released": "2025-03-10T23:15:35Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.6.4-4ubuntu0.2\u002Besm7",
      "fix": "ruby-rack 1.6.4-4ubuntu0.2\u002Besm7",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-ruby-rack-1.6.4-4ubuntu0.2-esm7",
      "released": "2025-03-10T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.7-2ubuntu0.1\u002Besm6",
      "fix": "ruby-rack 2.0.7-2ubuntu0.1\u002Besm6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-ruby-rack-2.0.7-2ubuntu0.1-esm6",
      "released": "2025-03-10T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.1.4-5ubuntu1.1\u002Besm1",
      "fix": "ruby-rack 2.1.4-5ubuntu1.1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ruby-rack-2.1.4-5ubuntu1.1-esm1",
      "released": "2025-03-10T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.2.7-1ubuntu0.2",
      "fix": "ruby-rack 2.2.7-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-ruby-rack-2.2.7-1ubuntu0.2",
      "released": "2025-03-10T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.2.7-1.1ubuntu0.1",
      "fix": "ruby-rack 2.2.7-1.1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-ruby-rack-2.2.7-1.1ubuntu0.1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.2.7-1.1ubuntu0.25.04.2",
      "fix": "ruby-rack 2.2.7-1.1ubuntu0.25.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-ruby-rack-2.2.7-1.1ubuntu0.25.04.2",
      "released": "2026-01-16T01:42:25Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.1.16-0.1",
      "fix": "ruby-rack 3.1.16-0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-ruby-rack-3.1.16-0.1",
      "released": "2025-05-07T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.1.16-0.1",
      "fix": "ruby-rack 3.1.16-0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-ruby-rack-3.1.16-0.1",
      "released": "2025-05-07T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rubygem-rack",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.0.8-150000.3.26.1",
      "fix": "SUSE-SU-2025:0874-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0874-1",
      "released": "2025-03-14T14:47:48Z"
    },
    {
      "platform": "linux",
      "product": "rubygem-rack",
      "release": "sles 15.6",
      "fixedVersion": "2.0.8-150000.3.26.1",
      "fix": "SUSE-SU-2025:0874-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0874-1",
      "released": "2025-03-14T14:47:48Z"
    },
    {
      "platform": "linux",
      "product": "rubygem-rack-1_6",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.6.8-150000.3.3.1",
      "fix": "SUSE-SU-2025:0858-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0858-1",
      "released": "2025-03-13T17:58:49Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}