Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby 授权问题漏洞
Vulnerability Description
Ruby是松本行弘软件开发者的一种跨平台、面向对象的动态类型编程语言。 Ruby 2.4.7及之前版本、2.5.x版本至2.5.6版本和2.6.x版本至2.6.4版本中的WEBrick::HTTPAuth::DigestAuth模块存在授权问题漏洞。攻击者可利用该漏洞实施正则表达式拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A