Skip to content
OpenAdvisories

Archive

January 2016

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.7

    Phusion Passenger allows remote attackers to spoof headers

    agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an…