Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-5036
5
MEDIUMCVSS v2
Published
December 30, 2011
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
rack
RubyGemsRack provides a minimal, modular and adaptable interface for developing
web applications in Ruby. By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
RubyGemsRack provides a minimal, modular and adaptable interface for developing
web applications in Ruby. By wrapping HTTP requests and responses in
the simplest way possible, it unifies and distills the API for web
servers, web frameworks, and software in between (the so-called
middleware) into a single method call.
= 1.3.1, <= 1.1.0, = 1.2.3, = 1.3.2, = 1.2.0, = 1.3.5, = 1.2.1, = 1.3.0, = 1.2.4, = 1.3.4, = 1.2.2, = 1.3.3NVD
rack/rack
GitHubA modular Ruby web server interface.
GitHubA modular Ruby web server interface.= 1.3.1, <= 1.1.0, = 1.2.3, = 1.3.2, = 1.2.0, = 1.3.5, = 1.2.1, = 1.3.0, = 1.2.4, = 1.3.4, = 1.2.2, = 1.3.3NVD