Lucene search

HTTP Request Smuggling

🗓️ 22 Aug 2023 14:09:17Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 51 Views

Puma Vulnerable to HTTP Request Smuggling

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 30
Vulnrichment	CVE-2023-40175 Inconsistent Interpretation of HTTP Requests in puma	18 Aug 202321:35	–	vulnrichment
RedhatCVE	CVE-2023-40175	22 Aug 202317:50	–	redhatcve
OSV	GHSA-68XG-GQQM-VGJ8 Puma HTTP Request/Response Smuggling vulnerability	18 Aug 202321:50	–	osv
OSV	CVE-2023-40175	18 Aug 202322:15	–	osv
OSV	UBUNTU-CVE-2023-40175	18 Aug 202322:15	–	osv
OSV	SUSE-SU-2023:3957-1 Security update for rubygem-puma	4 Oct 202307:10	–	osv
OSV	USN-6682-1 puma vulnerabilities	7 Mar 202414:00	–	osv
OSV	RHSA-2024:0797 Red Hat Security Advisory: Satellite 6.14.2 Async Security Update	30 Sep 202407:12	–	osv
Tenable Nessus	Ubuntu 23.04 : Puma vulnerability (USN-6399-1)	27 Sep 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-40175	5 Mar 202500:00	–	nessus

Vulners

Node

puma pumaMatch4.3.6-1debian

AND

puma pumaMatch4.3.6-1+b1debian

AND

debian debian_linuxMatch999

puma pumaRange3.6.0–5.6.6ruby

puma pumaRange6.0.0–6.3.0ruby

Source	Link
github	www.github.com/puma/puma/releases/tag/v5.6.7
github	www.github.com/puma/puma/releases/tag/v6.3.1
github	www.github.com/puma/puma/commit/7405a219801dcebc0ad6e0aa108d4319ca23f662
github	www.github.com/puma/puma/commit/ed0f2f94b56982c687452504b95d5f1fbbe3eed1
github	www.github.com/puma/puma/commit/690155e7d644b80eeef0a6094f9826ee41f1080a
github	www.github.com/puma/puma/security/advisories/GHSA-68xg-gqqm-vgj8
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2023-40175.yml

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Aug 2023 14:17Current

6.8Medium risk

Vulners AI Score6.8

CVSS37.3 - 9.8

EPSS0.00283

SSVC