Lucene search

K

Encodedid::Rails Security Vulnerabilities - February

cve
cve

CVE-2024-0241

encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long "id" parameter.

7.5CVSS

7.5AI Score

0.001EPSS

2024-01-04 09:15 PM
18