VDB
H1-895727
H1-895727
PUBLISHED
Rack parses encoded cookie names allowing an attacker to send malicious `__Host-` and `__Secure-` prefixed cookies
Exploit Intelligence
- Rack parses encoded cookie names allowing an attacker to send malicious `__Host-` and `__Secure-` prefixed cookies (hackerone)
- Rack parses encoded cookie names allowing an attacker to send malicious `__Host-` and `__Secure-` prefixed cookies (hackerone)
- .bundler-audit.yml (github-poc)
- .bundler-audit.yml (github-poc)
Timeline
- Jun 16, 2020 CVE Published
- Jun 16, 2020 PoC Published