Main
Vulnerability Database
Exploits
ID:2989 - Exploit for Inconsistent interpretation of HTTP requests in Puma - CVE-2020-11077
ID:2989 - Exploit for Inconsistent interpretation of HTTP requests in Puma - CVE-2020-11077
Published: June 3, 2020
Vulnerability identifier: #VU28304
Vulnerability risk: Medium
CVE-ID: CVE-2020-11077
CWE-ID: CWE-444
Exploitation vector: Remote access
Vulnerable software:
Puma
Puma
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to perform HTTP request smuggling attack.
The vulnerability exists due to improper input validation. A remote attacker can send a specially crafted HTTP request and perform HTTP request smuggling attack.
Remediation
Install updates from vendor's website.