VDB
CVE-2020-5216
CVE-2020-5216
PUBLISHED
In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input was passed into append/override_content_security_policy_directives, a newline could be injected leading to limited header injection. Upon seeing a newline in the header, rails will silently create a new Content-Security-Policy header with the remaining value of the original string. It will continue to create new headers for each newline. This has been fixed in 6.3.0, 5.2.0, and 3.9.0.
EPSS 0.35% · 57.6th percentile
Risk Scores
EPSS Score
0.35%
57.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | ruby-secure-headers | 0, 6.0.0-1, 6.1.1-1 |
| Ubuntu:18.04:LTS | ruby-secure-headers | 0, 3.7.1-1 |
Exploit Intelligence
Timeline
- Jan 23, 2020 CVE Published
- Jan 23, 2020 PoC Published
- Feb 18, 2020 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-5216 third-party-advisory
- https://github.com/twitter/secure_headers/security/advisories/GHSA-w978-rmpf-qmwg third-party-advisory
- https://github.com/twitter/secure_headers/commit/301695706f6a70517c2a90c6ef9b32178440a2d0 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-5216 third-party-advisory