Read the docs

Phusionpassenger

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Phusionpassenger records in CISA KEV

No Phusionpassenger vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 22

agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof hea…

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.02364 Published 2016-01-08 Partial fix · 4.0.60, 5.0.22 CWE-20
Open these records in search →