Lucene search
+L

2 matches found

RubySec
RubySec
added 2013/10/16 12:00 a.m.45 views

CVE-2013-4389 rubygem-actionmailer: email address processing DoS

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...

4.3CVSS4.9AI score0.03135EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder