Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: puma — openSUSE-SU-2020:1001 Clear all filters
TI-2020-08951 CVE-2020-11077 · GHSA-w64w-qqph-5gxm

HTTP Smuggling via Transfer-Encoding Header in Puma

Priority LOW 38

In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02877 Published 2020-05-22 Partial fix · 3.12.6, 4.3.5 CWE-444
TI-2020-08950 CVE-2020-11076 · GHSA-x7jg-6pwg-fx5h

HTTP Smuggling via Transfer-Encoding Header in Puma

Priority MEDIUM 40

In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04088 Published 2020-05-22 Partial fix · 3.12.5, 4.3.4 CWE-444