Archive
January 2016
Vulnerabilities first published in this month (UTC), newest first.
1 result · Clear filters · Feed
-
Low 3.7
Phusion Passenger allows remote attackers to spoof headers
agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an…