CVE-2024-39316 (rack): Rack ReDoS Vulnerability in HTTP Accept Headers Parsing

ADVISORIES CVE-2024-39316 (NVD) GHSA-cj83-2ww7-mvq7 Vendor Advisory GEM rack SEVERITY CVSS v3.x: 6.5 (Medium) UNAFFECTED VERSIONS < 3.1.0 PATCHED VERSIONS >= 3.1.5 DESCRIPTION Summary A Regular Expression Denial of Service (ReDoS) vulnerability exists in the module when parsing HTTP Accept headers.

Source: RUBYLAND

 

Date:

Categorie(s):

Tag(s):

, , , ,