Lucene search
+L

3485 matches found

Github Security Blog
Github Security Blog
added 2023/03/31 6:30 a.m.38 views

Ruby Time component ReDoS issue

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

5.3CVSS6AI score0.02452EPSS
SaveExploits0References17Affected Software1
NVD
NVD
added 2023/03/31 4:15 a.m.26 views

CVE-2023-28755

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1...

5.3CVSS7AI score0.02637EPSS
SaveExploits0References15
OSV
OSV
added 2023/03/31 4:15 a.m.4 views

DEBIAN-CVE-2023-28755

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1...

5.3CVSS7.2AI score0.02637EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/31 4:15 a.m.5 views

ALPINE-CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

5.3CVSS7.2AI score0.02452EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/31 4:15 a.m.24 views

CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

5.3CVSS6.9AI score0.02452EPSS
SaveExploits0References11
OSV
OSV
added 2023/03/31 4:15 a.m.6 views

UBUNTU-CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

5.3CVSS7.1AI score0.02452EPSS
SaveExploits0References13
Prion
Prion
added 2023/03/31 4:15 a.m.28 views

Authentication flaw

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1...

5CVSS5.5AI score0.02637EPSS
SaveExploits0References10Affected Software3
Prion
Prion
added 2023/03/31 4:15 a.m.76 views

Authentication flaw

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

5CVSS5.5AI score0.02452EPSS
SaveExploits0References10Affected Software4
UbuntuCve
UbuntuCve
added 2023/03/31 4:15 a.m.32 views

CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

5.3CVSS7.2AI score0.02452EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
added 2023/03/31 4:15 a.m.51 views

CVE-2023-28755

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1...

5.3CVSS7AI score0.02637EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2023/03/31 12:00 a.m.10 views

CVE-2023-28755

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1...

5.6AI score0.02637EPSS
SaveExploits0References12
CVE
CVE
added 2023/03/31 12:00 a.m.685 views

CVE-2023-28755

Summary: CVE-2023-28755 is a ReDoS vulnerability in Ruby’s URI parsing for the URI component, affecting Ruby versions up to 0.12.0 in the 0.x series and Ruby up to 3.2.1. The issue causes an abnormal increase in parsing time for certain invalid URLs, potentially leading to denial of service. Affe...

5.3CVSS5.9AI score0.02637EPSS
SaveExploits0References15Affected Software1
AlpineLinux
AlpineLinux
added 2023/03/31 12:00 a.m.38 views

CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

5.3CVSS6.1AI score0.02452EPSS
SaveExploits0
OSV
OSV
added 2023/03/31 12:00 a.m.32 views

CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

7AI score
SaveExploits0References13
CVE
CVE
added 2023/03/31 12:00 a.m.792 views

CVE-2023-28756

CVE-2023-28756 describes a ReDoS vulnerability in the Ruby Time parser up to version 3.2.1. The Time parser mishandles invalid URLs containing certain characters, causing increased execution time when parsing strings to Time objects. Affected product: Ruby Time component (through Ruby up to 3.2.1...

5.3CVSS5.7AI score0.02452EPSS
SaveExploits0References11Affected Software2
Vulnrichment
Vulnrichment
added 2023/03/31 12:00 a.m.11 views

CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

7.2AI score0.02452EPSS
SaveExploits0References10
OSV
OSV
added 2023/03/31 12:00 a.m.26 views

CVE-2023-28755

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1...

5.3CVSS7AI score
SaveExploits0References17
AlpineLinux
AlpineLinux
added 2023/03/31 12:00 a.m.126 views

CVE-2023-28755

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1...

5.3CVSS6.2AI score0.02637EPSS
SaveExploits0
RubySec
RubySec
added 2023/03/31 12:00 a.m.36 views

Ruby Time component ReDos issue

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

5.3CVSS6.8AI score0.02452EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/31 12:00 a.m.29 views

CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2...

6AI score0.02452EPSS
SaveExploits0References10
Rows per page
Query Builder