Описание
A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
The HTML sanitizer function in Rubygems' Redcloth incorrectly handles regular expression inputs. This issue could allow an attacker to send a malicious regexp to the server and cause a denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat 3scale API Management Platform 2 | 3scale-amp-system | Affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
A Regular Expression Denial of Service (ReDoS) issue was discovered in ...
RedCloth Regular Expression Denial of Service issue
Уязвимость функции sanitize_html программное обеспечения обработки текстовых данных на языке Ruby Redcloth, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.5 High
CVSS3