CVE-2023-22795
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.
| CWE | CWE-400 |
| Vendor | n/a |
| Product | https://github.com/rails/rails |
| Published | Feb 9, 2023 |
| Last Updated | Aug 2, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a https://github.com/rails/rails
Be the first to know when new unknown vulnerabilities affecting n/a https://github.com/rails/rails are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / https://github.com/rails/rails
6.1.7.1, 7.0.4.1