Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/06/25 7:53 a.m.106 views

RubyGems: No limit of summary length allows Denail of Service

Currently, there is no limit for summary length. I think, pushing a gem whose summary is huge, will make gem search unavailable. This is not Arbitrary Code Execution, but really easy to attack. According to CVSS v3.0 Calculator, the severity is High 7.5. How to attack 1 An attacker creates a gem...

5CVSS0.4AI score0.08491EPSS
SaveExploits1
Rows per page
Query Builder