CVE-2017-17742

CVE-2017-17742 is an HTTP Response Splitting vulnerability affecting Ruby versions prior to 2.2.10, 2.3.7, 2.4.4, 2.5.1, and 2.6.0-preview1, specifically within the WEBrick HTTP server. An attacker can inject malicious key-value pairs into HTTP responses, potentially leading to information disclosure. Rated as MEDIUM severity (CVSS 5.3), this vulnerability has a low attack complexity and does not require user interaction, but its impact is limited to integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.