Double decoding

SpiderLabs · Nov 6, 2018 · cd81893 · cd81893
1 parent 2a3aa4d
commit cd81893
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/cve_server/app.rb b/lib/cve_server/app.rb
@@ -24,7 +24,7 @@ class App < Sinatra::Base
 
     get '/v1/cpe/:cpe_str' do |cpe_str|
       if params.has_key?('double_encoded_fields') && params['double_encoded_fields']
-        cpe_str = URI.decode(cpe_str)
+        cpe_str = URI.decode(URI.decode(cpe_str))
       end
       # Multiple cpes were included
       if cpe_str.include?(",")
@@ -47,7 +47,7 @@ class App < Sinatra::Base
 
     get '/v1/cpe_with_version/:cpe_str' do |cpe_str|
       if params.has_key?('double_encoded_fields') && params['double_encoded_fields']
-        cpe_str = URI.decode(cpe_str)
+        cpe_str = URI.decode(URI.decode(cpe_str))
       end
       # Multiple cpes were included
       if cpe_str.include?(",")