CVE-2025-30221
CVSS 3.0 Score 4.3 of 10 (medium)
Details
Published Mar 27, 2025
CWE ID 113
Summary
CVE-2025-30221 is a vulnerability affecting Pitchfork, an HTTP server for Rack applications. Versions of Pitchfork prior to 0.11.0 are susceptible to HTTP Response Header Injection when used in combination with Rack 3. This issue allows malicious actors to inject malicious headers into the HTTP response, potentially leading to serious security consequences. No known workarounds are available, and the vulnerability was addressed in the release of Pitchfork 0.11.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Pitchfork