CVE-2020-5247
1 advisory.
RubyGems/puma CVE-2020-5247: medium 6.5
HTTP Response Splitting in Puma
Action: Upgrade puma to 3.12.4 or later.
bundle update pumaAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.12.4 | - |
| 4.0.0 | 4.3.3 | - |
Fixed versions
| 3.12.4 | 4.3.3 |
Sources
- osv: GHSA-84j7-475p-hp8v
- https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v
- https://nvd.nist.gov/vuln/detail/CVE-2020-5247
- https://github.com/puma/puma/commit/c36491756f68a9d6a8b3a49e7e5eb07fe6f1332f
- https://github.com/puma/puma
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2020-5247.yml
- https://lists.debian.org/debian-lts-announce/2022/05/msg00034.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BMJ3CGZ3DLBJ5WUUKMI5ZFXFJQMXJZIK
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIHVO3CQMU7BZC7FCTSRJ33YDNS3GFPK
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ3LL5F5QADB6LM46GXZETREAKZMQNRD
- https://owasp.org/www-community/attacks/HTTP_Response_Splitting
- https://www.ruby-lang.org/en/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254
CVE-2020-5247 · published · modified · JSON