EUVD-2017-0159

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Vulnerability in Ruby on Rails 3.0.5 allows remote attackers to inject text via X-Forwarded-For header.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2011-3187	16 Feb 201100:00	–	circl
CVE	CVE-2011-3187	29 Aug 201118:00	–	cve
Cvelist	CVE-2011-3187	29 Aug 201118:00	–	cvelist
Debian CVE	CVE-2011-3187	29 Aug 201118:00	–	debiancve
Github Security Blog	actionpack Improper Input Validation vulnerability	24 Oct 201718:33	–	github
GitLab Advisory Database	Improper Input Validation	24 Oct 201700:00	–	gitlab
NVD	CVE-2011-3187	29 Aug 201118:55	–	nvd
OpenVAS	Ruby on Rails Logfile Injection Vulnerability (Mar 2011)	22 Mar 201100:00	–	openvas
OSV	DEBIAN-CVE-2011-3187	29 Aug 201118:55	–	osv
OSV	GHSA-3VFW-7RCP-3XGM actionpack Improper Input Validation vulnerability	24 Oct 201718:33	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "72d0a230-8062-3fc8-bb51-3b44e42ffd90",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "d10b3111-fe15-3b57-bc84-ed24efcd1fe2",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2011-3187
bugzilla	www.bugzilla.novell.com/show_bug.cgi
github	www.github.com/rails/rails
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-3187.yml
web	www.web.archive.org/web/20111209181000/http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0337.html
webservsec	www.webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.html
openwall	www.openwall.com/lists/oss-security/2011/08/17/1
openwall	www.openwall.com/lists/oss-security/2011/08/19/11
openwall	www.openwall.com/lists/oss-security/2011/08/20/1
openwall	www.openwall.com/lists/oss-security/2011/08/22/13

07 Oct 2025 00:30Current

7.3High risk

Vulners AI Score7.3

CVSS 24.3

EPSS0.08484