CVE-2015-3225 in Ruby on Rails
摘要 (英语)
lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.
预定
2015-04-10
披露
2015-07-26
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 76813 | Ruby on Rails utils.rb 拒绝服务 | 19 | 未定义 | 官方修复 | CVE-2015-3225 |