Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/05/27 4:40 p.m.29 views

CVE-2024-35231 rack-contrib vulnerable to Denial of Service due to the unconstrained value of the incoming "profiler_runs" parameter

rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to denial of service due to the fact that the user controlled data profilerruns was not constrained to any limitation. This would lead to...

8.6CVSS8.4AI score0.00662EPSS
SaveExploits0References2
Rows per page
Query Builder