CVE-2011-3624

CVE-2011-3624 describes a vulnerability in WEBrick::HTTPRequest within Ruby versions 1.9.2 and 1.8.7 and earlier, where the X-Forwarded-For, X-Forwarded-Host, and X-Forwarded-Server headers are not properly validated. This flaw allows remote attackers to inject arbitrary text into log files or bypass address parsing mechanisms through crafted headers. Rated 5.3 Medium on CVSS, it has a network attack vector with low complexity and no user interaction, potentially leading to information integrity impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.