Ruby · Report #331984
HTTP header can split /[\r\n]/ instead of /\r\n/
Validstatus
1upvotes
25 Oct 2019disclosed
Summary
https://www.ruby-lang.org/ja/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254/
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.