PT-2020-19689 · Reel · Reel

Sam Sanoop · Published 2020-06-01 · Updated 2021-05-24 · CVE-2020-7659

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions reel versions 0.6.1 and earlier

Description The issue allows for Request Smuggling attacks due to incorrect parsing of Content-Length and Transfer encoding headers. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Additionally, invalid Transfer Encoding headers are parsed as valid, which could be leveraged for TE:CL smuggling attacks. The project is deprecated and no longer maintained.

Recommendations For versions 0.6.1 and earlier, as a temporary workaround, consider restricting the use of the Content-Length header and validating Transfer Encoding headers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2020-7659

GHSA-X3V4-PXVM-63J8

SNYK-RUBY-REEL-569135

Affected Products

Reel

References · 8

• https://ubuntu.com/security/CVE-2020-7659 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-7659 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7659 · Security Note
• https://osv.dev/vulnerability/GHSA-x3v4-pxvm-63j8 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-7659 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7659 · Vendor Advisory
• https://github.com/celluloid/reel · Note
• https://snyk.io/vuln/SNYK-RUBY-REEL-569135 · Note