CVE-2008-5189

Published: Nov 21, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.

Affected (49)

Products: Rubyonrails: Rails, Ruby On Rails

Rubyonrails

2 products

Rails

Ruby On Rails

Configuration A

49 vulnerable

Vulnerable Software	Affected Versions
Rubyonrails Rails	Version 0.10.0
Rubyonrails Rails	Version 0.10.1
Rubyonrails Rails	Version 0.11.0
Rubyonrails Rails	Version 0.11.1
Rubyonrails Rails	Version 0.12.0
Rubyonrails Rails	Version 0.12.1
Rubyonrails Rails	Version 0.13.0
Rubyonrails Rails	Version 0.13.1
Rubyonrails Rails	Version 0.14.1
Rubyonrails Rails	Version 0.14.2
Rubyonrails Rails	Version 0.14.3
Rubyonrails Rails	Version 0.14.4
Rubyonrails Rails	Version 0.9.1
Rubyonrails Rails	Version 0.9.2
Rubyonrails Rails	Version 0.9.3
Rubyonrails Rails	Version 0.9.4.1
Rubyonrails Rails	Version 0.9.4
Rubyonrails Rails	Version 1.0.0
Rubyonrails Rails	Version 1.1.0
Rubyonrails Rails	Version 1.1.1
Rubyonrails Rails	Version 1.1.2
Rubyonrails Rails	Version 1.1.3
Rubyonrails Rails	Version 1.1.4
Rubyonrails Rails	Version 1.1.5
Rubyonrails Rails	Version 1.1.6
Rubyonrails Rails	Version 1.2.0
Rubyonrails Rails	Version 1.2.1
Rubyonrails Rails	Version 1.2.2
Rubyonrails Rails	Version 1.2.3
Rubyonrails Rails	Version 1.2.4
Rubyonrails Rails	Version 1.2.5
Rubyonrails Rails	Version 1.2.6
Rubyonrails Rails	Version 1.9.5
Rubyonrails Rails	Version 2.0.0
Rubyonrails Rails	Version 2.0.0 rc1
Rubyonrails Rails	Version 2.0.0 rc2
Rubyonrails Rails	Version 2.0.1
Rubyonrails Rails	Version 2.0.2
Rubyonrails Ruby On Rails	Up to 2.0.4
Rubyonrails Ruby On Rails	Version 0.5.0
Rubyonrails Ruby On Rails	Version 0.5.5
Rubyonrails Ruby On Rails	Version 0.5.6
Rubyonrails Ruby On Rails	Version 0.5.7
Rubyonrails Ruby On Rails	Version 0.6.0
Rubyonrails Ruby On Rails	Version 0.6.5
Rubyonrails Ruby On Rails	Version 0.7.0
Rubyonrails Ruby On Rails	Version 0.8.0
Rubyonrails Ruby On Rails	Version 0.8.5
Rubyonrails Ruby On Rails	Version 0.9.0