Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Puma — FEDORA-2020-08092b4c97 Clear all filters
TI-2020-04305 CVE-2020-5249 · GHSA-33vf-4xgg-9r58

HTTP Response Splitting (Early Hints) in Puma

Priority LOW 32

In Puma (RubyGem) before 4.3.3 and 3.12.4, if an application using Puma allows untrusted input in an early-hints header, an attacker can use a carriage return character to end the header and inject malicious content, suc…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.01571 Published 2020-03-02 Partial fix · 3.12.4, 4.3.3 CWE-113
TI-2020-04303 CVE-2020-5247 · GHSA-84j7-475p-hp8v

HTTP Response Splitting in Puma

Priority LOW 38

In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response header, an attacker can use newline characters (i.e.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02549 Published 2020-02-28 Partial fix · 3.12.3, 4.3.2 +2 CWE-113