Vulners
Lucene search
HTTP Response Splitting
🗓️ 03 Mar 2020 05:17:42Reported by Veracode Vulnerability DatabaseType 
veracode🔗 sca.analysiscenter.veracode.com👁 35 Views
| Reporter | Title | Published | Views | Family All 107 |
|---|---|---|---|---|
 | The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma arises from incorrect handling of characters such as CR, LF, /r, and /n before data is inserted into HTTP headers. This allows attackers to perform cross-site scripting attacks. | 28 Aug 202000:00 | – | bdu_fstec |
 | CVE-2020-5247 affecting package ruby 2.6.3-3 | 9 Jun 202103:50 | – | cbl_mariner |
 | CVE-2020-5247 | 28 Feb 202016:55 | – | cve |
| CVE-2020-5249 | 2 Mar 202015:20 | – | cve |
 | CVE-2020-5247 HTTP Response Splitting in Puma | 28 Feb 202016:55 | – | cvelist |
| CVE-2020-5249 HTTP Response Splitting (Early Hints) in Puma | 2 Mar 202015:20 | – | cvelist |
 | [SECURITY] [DLA 3023-1] puma security update | 25 May 202222:50 | – | debian |
 | CVE-2020-5247 | 28 Feb 202016:55 | – | debiancve |
| CVE-2020-5249 | 2 Mar 202015:20 | – | debiancve |
 | Debian DLA-3023-1 : puma - LTS security update | 26 May 202200:00 | – | nessus |
10
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Nov 2023 23:54Current
1Low risk
Vulners AI Score1
CVSS 3.16.5 - 7.5
CVSS 25
EPSS0.02094