Summary #

Netsparker identified the target web site is using Phusion Passenger and detected that it is out of date.

Impact #

Since this is an old version of the software, it may be vulnerable to attacks.

Remediation #

Please pick the option that is used on the website by following the link in the Remedy Reference section and follow the steps to upgrade Phusion Passenger to the latest version

Classifications #
PCI v3.2-6.2; CAPEC-310; CWE-937, 1035; HIPAA-164.308(a)(1)(i); ISO27001-A.14.1.2; OWASP PC-C1; OWASP 2013-A9; OWASP 2017-A9
Netsparker

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo