CVE-2022-45442 (person-search-index-from-delius)

[github-actions[bot]]

Sinatra is a domain-specific language for creating web applications in ...

• Project: person-search-index-from-delius
• Package: sinatra:2.2.2
• Location: usr/share/logstash/vendor/bundle/jruby/2.6.0/specifications/sinatra-2.2.2.gemspec

Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.

https://avd.aquasec.com/nvd/cve-2022-45442

[izzyL-DJ]

Suppressed as we're not serving anything from the indexer

[izzyL-DJ]

Suppressed as we are not serving anything from the indexer