Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service (crash) via a crafted Range header.
https://exchange.xforce.ibmcloud.com/vulnerabilities/59135
http://www.securityfocus.com/bid/40575
http://secunia.com/advisories/40051
http://galileo.dmi.unict.it/wiki/weborf/doku.php?id=news:released_0.12.1