CVE
- Id
- 35306
- CVE No.
- CVE-2008-5189
- Status
- Candidate
- Description
- CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.
- Phase
- Assigned (20081120)
- Votes
- None (candidate not yet proposed)
- Comments