The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade rails | Jul 30, 2024 | Jun 11, 2021 |
| Freebsd | — | Upgrade rubygem-actionpack52Upgrade rubygem-actionpack60Upgrade rubygem-actionpack61 | Nov 4, 2022 | May 7, 2021 |
| Ruby_on_rails | — | Upgrade to the latest version of Ruby on Rails | Jun 24, 2021 | Jun 11, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub