Executive brief
Rack vulnerable to Denial of Service
Affected products
- RubyGems rack
Junglewise Threat Intelligence
CVE-2018-16470: Rack vulnerable to Denial of Service
CVE-2018-16470 · Severity: low · CVSS 3 · Published 2018-11-15
Technologies: rack (RubyGems). Vendors: RubyGems.
Related threats
- Rack CRLF injection in Rack::Multipart::Parser
- Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters
- ReDoS Vulnerability in Rack::Multipart handle_mime_head
- Rack session gets restored after deletion
- Rack ReDoS Vulnerability in HTTP Accept Headers Parsing