| Revision Date: | 2015-11-16 | Version: | 1 | | Title: | CVE-2011-3186 | | Description: |
CRLF injection vulnerability in actionpack/lib/action_controller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the Content-Type header.
| | Family: | unix | Class: | vulnerability | | Status: | | Reference(s): | CVE-2011-3186
| | Platform(s): | openSUSE 11.3
openSUSE 11.4
SUSE Linux Enterprise Software Development Kit 11 SP1
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Studio Extension for System z 1.2
SUSE Studio Onsite 1.2 [Appliance - Studio]
SUSE Studio Standard Edition 1.2
WebYaST 1.2
| Product(s): | |
|