CVE-2022-45442

highpriority · attend · 45OT risk · highEPSS 0.007 · 53 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.69% (53rd) EPSS

CVSS 8.8 · high

Is it mine?

51 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-26

Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. Version 2.2.3 and 3.0.4 contain patches for this issue.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedpcs-0:0.10.8-1.el8_4.3.aarch64 as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-0:0.10.8-1.el8_4.3.ppc64le as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-0:0.10.8-1.el8_4.3.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-0:0.10.8-1.el8_4.3.s390x as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-0:0.10.8-1.el8_4.3.s390x as a component of Red Hat Enterprise Linux ResilientStorage EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-0:0.10.8-1.el8_4.3.src as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-0:0.10.8-1.el8_4.3.src as a component of Red Hat Enterprise Linux ResilientStorage EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-0:0.10.8-1.el8_4.3.x86_64 as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-0:0.10.8-1.el8_4.3.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-snmp-0:0.10.8-1.el8_4.3.aarch64 as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-snmp-0:0.10.8-1.el8_4.3.ppc64le as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-snmp-0:0.10.8-1.el8_4.3.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-snmp-0:0.10.8-1.el8_4.3.s390x as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-snmp-0:0.10.8-1.el8_4.3.s390x as a component of Red Hat Enterprise Linux ResilientStorage EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-snmp-0:0.10.8-1.el8_4.3.x86_64 as a component of Red Hat Enterprise Linux HighAvailability EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506
Fixedpcs-snmp-0:0.10.8-1.el8_4.3.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage EUS (v.8.4)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:0506

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v3.18.8highAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · security-advisories@github.comexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · OSV

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-494USCWE-494USCWE-494USCWE-494US

exploits (1)

Public proof-of-concept and weaponised exploit code.

boost-legal/refilePrivate fork of refile/refile (pinned at c4ac577c) with sinatra ceiling raised to < 4.0 for CVE-2022-45442. See sc-47428.PoC · poc_in_github

affected products (51)

Products and version ranges known to be affected.

Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Open Source CentOSall versionscert_bundDEcpe:/o:centos:centos:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux 8.2all versionscert_bundDEcpe:/o:redhat:enterprise_linux:8.2
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
sinatra sinatra2.0, → 2.2.3enisa_euvdEU
sinatra sinatra3.0, → 3.0.4enisa_euvdEU
Elastic NV Logstash≤ 7.17.18fstec_bduRU
Novell Inc. SUSE Liberty Linux≤ 8fstec_bduRU
Novell Inc. SUSE Liberty Linux≤ 9fstec_bduRU
Red Hat Inc. Red Hat 3scale API Management Platform≤ 2fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.2 Telecommunications Update Servicefstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.1 Update Services for SAP Solutionsfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.6 Extended Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.2 Update Services for SAP Solutionsfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8.4 Extended Update Supportfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 9fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 9.0 Extended Update Supportfstec_bduRU

showing 20 of 51

advisories (3)

Vendor and ecosystem advisories describing this.

RHSA-2023:0506Red Hat Security Advisory: pcs security update2023-01-30csaf · redhat_csafUS
An update for pcs is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2023-0186Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Umgehen von SicherheitsvorkehrungenDeutsch2023-01-23csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
GHSA-2x8x-jmrp-phxwSinatra vulnerable to Reflected File Download attack2022-11-30ghsa · osvUS
### Description An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input. ### References * https://www.blackhat.com/docs/eu-14/materials/eu-14-Hafif-Reflected-File-Download-A-New-Web-Attack-Vector.pdf * https://github.com/advisories/GHSA-8x94-hmjh-97hq

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund redhat_csaf osv NVD CVE.org MITRE

published 2022-11-28modified 2026-08-04

references (21)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan