GHSA-v882-ccj6-jc48Medium

Rack vulnerable to Denial of Service

Published
May 5, 2022
Last Modified
March 8, 2023

🔗 CVE IDs covered (1)

CVE-2013-0184 →

📋 Description

Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."

🎯 Affected products4

  • rubygems/rack:>= 1.1.0, < 1.1.5
  • rubygems/rack:>= 1.2.0, < 1.2.7
  • rubygems/rack:>= 1.3.0, < 1.3.9
  • rubygems/rack:>= 1.4.0, < 1.4.4

🔗 References (11)