💣Exploit CVE-2023-28362 - "Adobe Rails HTTP Header Injection Vulnerability"

[Maksim]

CVE ID : CVE-2023-28362
Published : Jan. 9, 2025, 1:15 a.m. | 1 hour, 55 minutes ago
Description : The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.