CVE-2022-24790 - log back

CVE-2022-24790 edited at 15 Jun 2022 19:41:12
Severity
- Medium
+ Unknown
CVE-2022-24790 edited at 15 Jun 2022 19:01:53
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Description
+ Puma behind a proxy that does not properly validate that the incoming HTTP request matches the RFC7230 standard, Puma and the frontend proxy may disagree on where a request starts and ends. This would allow requests to be smuggled via the front-end proxy to Puma.
References
+ https://github.com/puma/puma/commit/5bb7d202e24dec00a898dca4aa11db391d7787a5
+ https://github.com/puma/puma/security/advisories/GHSA-h99w-9q5r-gjq9
Notes
CVE-2022-24790 created at 15 Jun 2022 18:43:21