GHSA-QWF7-RV77-FCR3 Duplicate Advisory: Malicious URL drafting attack against iodines static file server may allow path traversal

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-85rf-xh54-whp3. This link is maintained to preserve external references. Original Description Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to re...

iodine Path Traversal Vulnerability

Iodine is a fast and concurrent web application server for real-time Ruby applications from Bo Individual Developers. A path traversal vulnerability exists in Iodine versions prior to 0.7.33, which stems from a path traversal in the static file service, and can be exploited by a remote attacker t...

HTTP Request Smuggling

Overview iodine is a fast HTTP / Websocket Server with built-in Pub/Sub support with or without Redis, static file support and many other features, optimized for Ruby MRI on Linux / BSD / macOS. Affected versions of this package are vulnerable to HTTP Request Smuggling. HTTP pipelining issues and...