CVE-2024-21647 | Puma up to 5.6.7/6.4.1 Chunked Transfer Encoding Parser request smuggling (GHSA-c2f4-cvqm-65w2)

A vulnerability classified as critical was found in Puma up to 5.6.7/6.4.1. Affected by this vulnerability is an unknown functionality of the component Chunked Transfer Encoding Parser. The manipulation leads to http request smuggling.

This vulnerability is known as CVE-2024-21647. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.