CVE-2023-22796
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability.
| CWE | CWE-400 |
| Vendor | n/a |
| Product | https://github.com/rails/rails |
| Published | Feb 9, 2023 |
| Last Updated | Nov 27, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a https://github.com/rails/rails
Be the first to know when new unknown vulnerabilities affecting n/a https://github.com/rails/rails are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / https://github.com/rails/rails
6.1.7.1, 7.0.4.1