Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header check), which may lead to an HTTP Request Smuggling attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby 环境问题漏洞
Vulnerability Description
Ruby是松本行弘软件开发者的一种跨平台、面向对象的动态类型编程语言。 Ruby 2.7.1及之前版本，2.6.6及之前版本，2.5.8及之前版本存在安全漏洞，该漏洞源于WEBrick没有严格检查transfer-encoding头值，从而允许攻击者滥用http请求。
CVSS Information
N/A
Vulnerability Type
N/A