Lucene search

CVE-2020-5247

🗓️ 28 Feb 2020 17:12:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 263 Views

Puma (RubyGem) before 4.3.2 and before 3.12.3 allows HTTP Response Splittin

Reporter	Title	Published	Views	Family All 173
Veracode	CRLF Injection	2 Mar 202001:51	–	veracode
Veracode	HTTP Response Splitting	3 Mar 202005:17	–	veracode
Veracode	HTTP Response Splitting	2 Oct 201906:21	–	veracode
Prion	Cross site scripting	28 Feb 202017:15	–	prion
Prion	Cross site scripting	2 Mar 202016:15	–	prion
Prion	Input validation	26 Nov 201918:15	–	prion
Cvelist	CVE-2020-5247 HTTP Response Splitting in Puma	28 Feb 202016:55	–	cvelist
Cvelist	CVE-2020-5249 HTTP Response Splitting (Early Hints) in Puma	2 Mar 202015:20	–	cvelist
Cvelist	CVE-2019-16254	26 Nov 201900:00	–	cvelist
NVD	CVE-2020-5247	28 Feb 202017:15	–	nvd

Nvd

Vulners

Node

puma pumaRange≤3.12.3ruby

puma pumaRange4.0.0–4.3.2ruby

ruby-lang rubyRange≤2.3.0

ruby-lang rubyRange2.4.0–2.4.7

ruby-lang rubyRange2.5.0–2.5.6

ruby-lang rubyRange2.6.0–2.6.4

ruby-lang rubyMatch2.7.0preview1

Node

debian debian_linuxMatch9.0

Node

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

fedoraproject fedoraMatch32

[
  {
    "product": "Puma",
    "vendor": "puma",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.12.3"
      },
      {
        "status": "affected",
        "version": ">= 4.0.0, < 4.3.2"
      }
    ]
  }
]

Source	Link
github	www.github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIHVO3CQMU7BZC7FCTSRJ33YDNS3GFPK/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMJ3CGZ3DLBJ5WUUKMI5ZFXFJQMXJZIK/
ruby-lang	www.ruby-lang.org/en/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ3LL5F5QADB6LM46GXZETREAKZMQNRD/
owasp	www.owasp.org/www-community/attacks/HTTP_Response_Splitting
lists	www.lists.debian.org/debian-lts-announce/2022/05/msg00034.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Feb 2020 17:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS25

CVSS36.5 - 7.5

EPSS0.01312