Lucene search
+L

1 matches found

RubySec
RubySec
added 2019/10/01 12:0 a.m.75 views

HTTP response splitting in WEBrick (Additional fix)

If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. This is the same issue as CVE-2017-17742. The previous fix was incomplete, which addressed the...

5.3CVSS0.2AI score0.04569EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder