CVE-2009-4492

CVE-2009-4492 describes a vulnerability in WEBrick 1.3.1, affecting various versions of Ruby, where unsanitized non-printable characters in HTTP requests are written to log files. This could allow remote attackers to manipulate terminal emulator titles, or potentially execute arbitrary commands or overwrite files. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, leading to potential confidentiality, integrity, and availability impacts. While not in the KEV catalog or actively exploited, an exploit module exists on ExploitDB, though there is no evidence of broader community discussion or media coverage.