EUVD-2017-0256

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Thin web server before 1.2.4 allows IP spoofing via modified X-Forwarded-For header exploitation

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2009-3287	22 Sep 200910:00	–	cve
Cvelist	CVE-2009-3287	22 Sep 200910:00	–	cvelist
Debian CVE	CVE-2009-3287	22 Sep 200910:00	–	debiancve
Github Security Blog	High severity vulnerability that affects thin	24 Oct 201718:33	–	github
NVD	CVE-2009-3287	22 Sep 200910:30	–	nvd
OSV	DEBIAN-CVE-2009-3287	22 Sep 200910:30	–	osv
OSV	GHSA-J24P-R6WX-R79W High severity vulnerability that affects thin	24 Oct 201718:33	–	osv
Prion	Design/Logic Flaw	22 Sep 200910:30	–	prion
RedhatCVE	CVE-2009-3287	22 May 202500:09	–	redhatcve
RubySec	High severity vulnerability that affects thin	24 Oct 201700:00	–	rubygems

[
  {
    "enisaIdVendor": [
      {
        "id": "bc3cfaf9-3342-319f-a34e-36bbd9cf86ba",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0f876507-29d5-3a1b-9356-348aad5c3751",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2009-3287
github	www.github.com/advisories/GHSA-j24p-r6wx-r79w
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/thin/CVE-2009-3287.yml
github	www.github.com/macournoyer/thin
github	www.github.com/macournoyer/thin/blob/master/CHANGELOG
github	www.github.com/macournoyer/thin/commit/7bd027914c5ffd36bb408ef47dc749de3b6e063a
openwall	www.openwall.com/lists/oss-security/2009/09/12/1
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 27.5

EPSS0.00478