Описание
Pitchfork HTTP Request/Response Splitting vulnerability
Impact
HTTP Response Header Injection in Pitchfork Versions < 0.11.0 when used in conjunction with Rack 3
Patches
The issue was fixed in Pitchfork release 0.11.0
Workarounds
There are no known work arounds. Users must upgrade.
Ссылки
Пакеты
Наименование
pitchfork
rubygems
Затронутые версииВерсия исправления
< 0.11.0
0.11.0
Связанные уязвимости
CVSS3: 4.3
nvd
11 месяцев назад
Pitchfork is a preforking HTTP server for Rack applications. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used in conjunction with Rack 3. The issue was fixed in Pitchfork release 0.11.0. No known workarounds are available.