Lucene search
+L

1 matches found

RubySec
RubySec
added 2025/10/10 12:0 a.m.11 views

Rack has a Possible Information Disclosure Vulnerability

Summary A possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to miscommunicate with the proxy and trigger unintended internal requests, potentially...

5.8CVSS6.1AI score0.00434EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder