CVE-2024-0241 encoded_id-rails Denial of Service Vulnerability

2024-01-0420:48:00

CWE-400

VulnCheck

www.cve.org

cve-2024-0241

encoded_id-rails

denial of service

0.001 Low

EPSS

Percentile

30.9%

JSON

encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long “id” parameter.

CNA Affected

[
  {
    "collectionURL": "https://rubygems.org",
    "defaultStatus": "unaffected",
    "packageName": "encoded_id-rails",
    "versions": [
      {
        "lessThan": "1.0.0.beta2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]