Executive brief
Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
Affected products
- RubyGems rack
Junglewise Threat Intelligence
CVE-2024-39316: Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
CVE-2024-39316 · Severity: low · CVSS 3.1 · Published 2024-07-03
Technologies: rack (RubyGems). Vendors: RubyGems.
Related threats
- Rack CRLF injection in Rack::Multipart::Parser
- Rack has an unsafe default in Rack::QueryParser allows params_limit bypass via semicolon-separated parameters
- ReDoS Vulnerability in Rack::Multipart handle_mime_head
- Rack session gets restored after deletion
- Directory traversal in Rack::Directory app bundled with Rack