CVE-2020-5249
1 advisory.
RubyGems/puma CVE-2020-5249: medium 6.5, EPSS 1.57%
HTTP Response Splitting (Early Hints) in Puma
Action: Upgrade puma to 3.12.4 or later.
bundle update pumaAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.12.4 | - |
| 4.0.0 | 4.3.3 | - |
Fixed versions
| 3.12.4 | 4.3.3 |
Sources
- osv: GHSA-33vf-4xgg-9r58
- https://github.com/puma/puma/security/advisories/GHSA-33vf-4xgg-9r58
- https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v
- https://nvd.nist.gov/vuln/detail/CVE-2020-5249
- https://github.com/puma/puma/commit/c22712fc93284a45a93f9ad7023888f3a65524f3
- https://github.com/puma/puma
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2020-5249.yml
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BMJ3CGZ3DLBJ5WUUKMI5ZFXFJQMXJZIK
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIHVO3CQMU7BZC7FCTSRJ33YDNS3GFPK
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ3LL5F5QADB6LM46GXZETREAKZMQNRD
- https://owasp.org/www-community/attacks/HTTP_Response_Splitting
CVE-2020-5249 · published · modified · JSON