CVE-2011-3186: Response Splitting Vulnerability in Ruby on Rails

August 29, 2011 (updated August 8, 2019)

A response splitting flaw can allow a remote attacker to inject arbitrary HTTP headers into a response due to insufficient sanitization of the values provided for response content types.

References

github.com/rails/rails/commit/11dafeaa7533be26441a63618be93a03869c83a9
github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/OSVDB-74616.yml
groups.google.com/forum/

Code Behaviors & Features

Detect and mitigate CVE-2011-3186 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →