The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma arises from incorrect handling of characters such as CR, LF, /r, and /n before data is inserted into HTTP headers. This allows attackers to perform cross-site scripting attacks.

🗓️ 28 Aug 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Ruby Rack Puma vulnerability: improper removal of carriage return and line feed before headers enables cross site scripting.

Reporter	Title	Published	Views	Family All 265
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-ze	24 Jul 202021:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM Cloud Foundry Migration Runtime	13 Oct 202114:44	–	ibm
Tenable Nessus	Amazon Linux 2 : ruby (ALAS-2024-2486)	5 Mar 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY2.6-2023-007)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : ruby24 (ALAS-2020-1422)	31 Aug 202000:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:2.6 (ALSA-2021:2588)	7 Aug 202300:00	–	nessus
Tenable Nessus	CentOS 8 : ruby:2.5 (CESA-2021:2587)	29 Jun 202100:00	–	nessus
Tenable Nessus	CentOS 8 : ruby:2.6 (CESA-2021:2588)	29 Jun 202100:00	–	nessus
Tenable Nessus	Debian DLA-2007-1 : ruby2.1 security update	26 Nov 201900:00	–	nessus
Tenable Nessus	Debian DLA-2027-1 : jruby security update	12 Dec 201900:00	–	nessus

Vulners

Node

fedora fedoraMatch30

OR

fedora fedoraMatch31

OR

fedora fedoraMatch32

Source	Link
github	www.github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/BMJ3CGZ3DLBJ5WUUKMI5ZFXFJQMXJZIK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DIHVO3CQMU7BZC7FCTSRJ33YDNS3GFPK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NJ3LL5F5QADB6LM46GXZETREAKZMQNRD/
owasp	www.owasp.org/www-community/attacks/HTTP_Response_Splitting
ruby-lang	www.ruby-lang.org/en/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
web	www.web.nvd.nist.gov/view/vuln/detail

17 Oct 2022 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.5

CVSS 27.5

EPSS0.02094

ruby rack puma header injection carriage return line feed cross site scripting