CVE-2023-27539
Public on 2023-03-20
Modified on 2024-02-10
Description
The Ruby on Rails advisory describes this vulnerability as follows:
Carefully crafted input can cause header parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that parse headers using Rack (virtually all Rails applications) are impacted.
CVSS v3 Base Score
See breakdown
