Skip to content

Vendor

phusionpassenger vulnerabilities

1 published CVE affecting phusionpassenger, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
1
Unscored
0
CISA KEV
0
Atom feed of phusionpassenger alerts

Products

Latest phusionpassenger CVEs

Newest publication first

  1. CVE-2015-7519 Phusion Passenger allows remote attackers to spoof headers

    Published
    LowCVSS 3.7 EPSS 2.4% PoC

    agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an _ (underscore) chara...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.