exploitDog

CVE-2008-5189

Опубликовано: 14 окт. 2008

Источник: redhat

EPSS Низкий

Описание

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=472510rubygems-actionpack: redirect HTTP header injection vulnerability

EPSS

Процентиль: 73%

0.01546

Низкий

Связанные уязвимости

CVE-2008-5189

ubuntu

больше 17 лет назад

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.

CVE-2008-5189

nvd

больше 17 лет назад

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.

CVE-2008-5189

debian

больше 17 лет назад

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remo ...

GHSA-jmgf-p46x-982h

github

почти 9 лет назад

rails is vulnerable to CRLF injection

EPSS

Процентиль: 73%

0.01546

Низкий