CVE-2024-47220
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. NOTE: the supplier's position is "Webrick should not be used in production."
| Vendor | n/a |
| Product | n/a |
| Published | Sep 22, 2024 |
| Last Updated | Jan 9, 2025 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new unknown vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
github.com: https://github.com/ruby/webrick/issues/145 github.com: https://github.com/ruby/webrick/pull/146/commits/d88321da45dcd230ac2b4585cad4833d6d5e8841 github.com: https://github.com/ruby/webrick/issues/145#issuecomment-2369994610 github.com: https://github.com/ruby/webrick/issues/145#issuecomment-2372838285