Lucene search
+L

595 matches found

OSV
OSV
added 2025/06/26 9:31 p.m.6 views

GHSA-R995-Q44H-HR64 Ruby WEBrick read_headers method can lead to HTTP Request/Response Smuggling

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.9AI score0.00422EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/06/26 9:31 p.m.12 views

Ruby WEBrick read_headers method can lead to HTTP Request/Response Smuggling

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.9AI score0.00422EPSS
SaveExploits0References5Affected Software1
RubySec
RubySec
added 2025/06/26 12:0 a.m.17 views

Ruby WEBrick read_headers method can lead to HTTP Request/Response Smuggling

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS7AI score0.00422EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2025/06/25 5:42 p.m.1 views

HTTP Request Smuggling

Overview webrick is a HTTP server toolkit that can be configured as an HTTPS server, a proxy server, and a virtual-host server. Affected versions of this package are vulnerable to HTTP Request Smuggling via the readheaders method. An attacker can exploit inconsistent parsing of HTTP header...

8.3CVSS7.1AI score0.00422EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/25 5:15 p.m.5 views

AZL-64367 CVE-2025-6442 affecting package rubygem-webrick for versions less than 1.7.0-2

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/25 5:15 p.m.6 views

DEBIAN-CVE-2025-6442

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

5.9CVSS6.6AI score0.00422EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/25 5:15 p.m.8 views

CVE-2025-6442

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS0.00422EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/06/25 5:15 p.m.9 views

CVE-2025-6442

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS7AI score0.00422EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/25 5:15 p.m.8 views

AZL-64355 CVE-2025-6442 affecting package rubygem-webrick for versions less than 1.8.1-2

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/25 5:15 p.m.7 views

AZL-64352 CVE-2025-6442 affecting package ruby for versions less than 3.3.5-4

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/25 5:15 p.m.9 views

AZL-64364 CVE-2025-6442 affecting package ruby for versions less than 3.1.7-2

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/25 5:15 p.m.6 views

UBUNTU-CVE-2025-6442

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/06/25 4:52 p.m.3 views

CVE-2025-6442 Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.6AI score0.00422EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/25 4:52 p.m.10 views

CVE-2025-6442 Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS0.00422EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/06/25 4:52 p.m.9 views

CVE-2025-6442

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.6AI score0.00422EPSS
SaveExploits0
CVE
CVE
added 2025/06/25 4:52 p.m.75 views

CVE-2025-6442

CVE-2025-6442 affects Ruby WEBrick: the vulnerability is a flaw in read_headers that causes inconsistent termination parsing of HTTP headers, enabling HTTP request smuggling under certain proxy conditions. Affected are Ruby WEBrick and Rubygem-WeBrick components across several platforms (e.g., Ru...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/06/25 4:52 p.m.7 views

CVE-2025-6442 Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/25 12:0 a.m.5 views

Webrick 环境问题漏洞

Webrick is an HTTP server toolkit open-sourced by The Ruby Programming Language. Webrick suffers from an environment issue vulnerability that stems from inconsistent parsing of HTTP header terminators by the readheaders method, which could lead to an HTTP request entrapment attack...

6.5CVSS6.4AI score0.00422EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/06/24 11:24 p.m.6 views

SUSE CVE-2025-6442

Ruby WEBrick readheader HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions. The...

6.5CVSS7AI score0.00422EPSS
SaveExploits0References6
Photon
Photon
added 2025/06/24 12:0 a.m.11 views

Important Photon OS Security Update - PHSA-2025-4.0-0820

Updates of 'rubygem-webrick', 'nodejs' packages of Photon OS have been released...

6.7AI score0.00393EPSS
SaveExploits0
Rows per page
Query Builder