Back to Database
Status published
Medium
CVE-2025-27111
Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection
Vulnerability Description
Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-27111
Credits & Attribution
No credits recorded in the NVD database.
References
More from rack
View All →CVE-2025-61919
Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing
High
7.5
CVE-2025-61780
Rack has Possible Information Disclosure Vulnerability
Medium
5.8
CVE-2025-61772
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
High
7.5
CVE-2025-61771
Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
High
7.5
CVE-2025-61770
Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)
High
7.5
Affected Vendor
rack
View all reports →Affected Software
rack
Vulnerable Versions:
< 2.2.12, >= 3.0, < 3.0.13, >= 3.1, < 3.1.11
Timeline
Official Publish:
March 4th, 2025
Last Modified:
November 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.