Main
Vulnerability Database
Exploits
ID:2990 - Exploit for Inconsistent interpretation of HTTP requests in Puma - CVE-2020-11076
ID:2990 - Exploit for Inconsistent interpretation of HTTP requests in Puma - CVE-2020-11076
Published: June 3, 2020
Vulnerability identifier: #VU28303
Vulnerability risk: Medium
CVE-ID: CVE-2020-11076
CWE-ID: CWE-444
Exploitation vector: Remote access
Vulnerable software:
Puma
Puma
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to perform HTTP request smuggling attack.
The vulnerability exists due to improper input validation in the Transfer-Encoding Header. A remote attacker can send a specially crafted HTTP request and perform HTTP request smuggling attack.
Remediation
Install updates from vendor's website.