CVE-2022-24790
Assigner: GitHub_M
Published: 2022-03-30T21:50:09
State: PUBLISHED
affected: product: puma
vendor: puma
versions: status: affected
version: < 4.3.12
status: affected
version: >= 5.0.0, <  5.6.4
descriptions: value: Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that the incoming HTTP request matches the RFC7230 standard, Puma and the frontend proxy may disagree on where a request starts and ends. This would allow requests to be smuggled via the front-end proxy to Puma. The vulnerability has been fixed in 5.6.4 and 4.3.12. Users are advised to upgrade as soon as possible. Workaround: when deploying a proxy in front of Puma, turning on any and all functionality to make sure that the request matches the RFC7230 standard.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-444
description: CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
type: CWE
source: advisory: GHSA-h99w-9q5r-gjq9
discovery: UNKNOWN
title: HTTP Request Smuggling in puma