2 matches found
Linux Distros Unpatched Vulnerability : CVE-2011-3624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers...
5.3CVSS6AI score0.01521EPSS
SaveExploits0References2
CVE-2011-3624
CVE-2011-3624 affects WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier. The vulnerability arises because these methods do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers, which could allow remote attackers to inject arbitrary text into log files or to byp...
5.3CVSS5.3AI score0.01521EPSS
SaveExploits0References4Affected Software1
20