An HTTP header injection vulnerability in Ruby's net/http standard library allows attackers to inject arbitrary headers into HTTP requests.

  • Product: Ruby (net/http)
  • Type: HTTP Header Injection
  • Reference: Bugtraq