Поиск уязвимостей
Количество 8
Количество 8
GHSA-g8ww-46x2-2p65
Denial of Service in Action Dispatch
CVE-2021-22902
The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine.
CVE-2021-22902
The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine.
CVE-2021-22902
The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine.
CVE-2021-22902
The actionpack ruby gem (a framework for handling and responding to we ...
BDU:2021-04601
Уязвимость обработчика регулярных выражений парсера Mime-типа функционала Action Dispatch фреймворка actionpack ruby gem программной платформы Ruby on Rails, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2021-2595
ALT-PU-2021-2595: package `gem-rails` update to version 6.1.3.2-alt1
ALT-PU-2023-4268
ALT-PU-2023-4268: package `gem-rails` update to version 6.1.7.1-alt1.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-g8ww-46x2-2p65 Denial of Service in Action Dispatch | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-22902 The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine. | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-22902 The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine. | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
 | CVE-2021-22902 The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine. | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
| CVE-2021-22902 The actionpack ruby gem (a framework for handling and responding to we ... | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
 | BDU:2021-04601 Уязвимость обработчика регулярных выражений парсера Mime-типа функционала Action Dispatch фреймворка actionpack ruby gem программной платформы Ruby on Rails, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
| ALT-PU-2021-2595 ALT-PU-2021-2595: package `gem-rails` update to version 6.1.3.2-alt1 | CVSS3: 7.5 | около 5 лет назад | |
| ALT-PU-2023-4268 ALT-PU-2023-4268: package `gem-rails` update to version 6.1.7.1-alt1.1 | CVSS3: 9.8 | около 3 лет назад |
Уязвимостей на страницу