Denial of Service in Action View of Ruby on Rails
CVE-2013-6414

Currently unrated

Key Information:

Status
Vendor
CVE Published:
7 December 2013

What is CVE-2013-6414?

A vulnerability in Action View of Ruby on Rails allows remote attackers to trigger excessive memory consumption by sending a header with an invalid MIME type. This mischaracterization leads to a denial of service as the system becomes overwhelmed with excessive caching demands, affecting the availability of the application. It is crucial for users running affected versions to apply the necessary updates to mitigate the risks associated with this vulnerability.

References

EPSS Score

70% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.