stevegeek/encoded_id-rails

stevegeek/encoded_id-rails

GitHubGitHub
GitHubgithub.com
Releases11
Frequency2 months 3 weeks
Last Release
Stars8
Use `encoded_id` with Rails ActiveRecord models
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-0241↗
7.5 HIGH—

encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long "id" parameter.