CVE-2011-3624 Other in Ruby
Attackers can inject arbitrary text into logs or bypass address parsing in Ruby's WEBrick server via crafted HTTP headers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-3624?
CVE-2011-3624 is a medium-severity vulnerability in Ruby-Lang Ruby, published on 26 Nov 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.
Weakness: CWE-74
Which versions are affected by CVE-2011-3624?
It affects 1 product.
Products include Ruby-Lang Ruby.
How do I fix CVE-2011-3624?
No fix has been published for CVE-2011-3624 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-3624 being exploited?
There is no known exploitation of CVE-2011-3624 in the wild and no public exploit code.
Other vulnerabilities in Ruby-Lang Ruby
Sources
Also known as GHSA-rc82-v3mm-rhj2.