Most recent entries from all

cnvd-2016-00310

EUVD-2026-95062

fkie_cve-2015-7519

agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X_User header.

GHSA-fxwv-953p-7qpf — Phusion Passenger allows remote attackers to spoof headers

Affected: RubyGems: passenger

`agent/Core/Controller/SendRequest.cpp` in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an `_` (underscore) character instead of a `-` (dash) character in an HTTP header, as demonstrated by an `X_User` header.

gsd-2015-7519

openSUSE-SU-2024:11341-1 — ruby2.7-rubygem-passenger-6.0.8-3.2 on GA media

ruby2.7-rubygem-passenger-6.0.8-3.2 on GA media

SUSE-SU-2015:2337-1 — Security update for rubygem-passenger

Security update for rubygem-passenger

Withdrawn: UBUNTU-CVE-2015-7519

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: passenger