Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the unconstrained value of the incoming profilerruns parameter. An attacker can cause the server to allocate excessive resources, leading to a denial of service by sending...

PT-2024-26396 · Unknown · Rack-Contrib

Name of the Vulnerable Software and Affected Versions: rack-contrib versions prior to 2.5.0 Description: The issue is related to a denial of service vulnerability due to the lack of constraints on user-controlled data profiler runs. This allows for the allocation of resources on the server side...