Lucene search
K

CVE-2024-45614 Header normalization allows for client to clobber proxy set headers in Puma

🗓️ 19 Sep 2024 22:42:33Reported by GoogleType 
osv
 osv
🔗 osv.dev👁 19 Views

Puma web server affected by CVE-2024-45614 allows clients to clobber values set by intermediate proxies. Upgrade v6.4.3/v5.6.9 discards headers using underscores to mitigate the issue. Nginx has mitigation with "underscores_in_headers" variable

Related
Refs

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation