Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.
CVSS Information
N/A
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
Ruby 安全漏洞
Vulnerability Description
Ruby是松本行弘个人开发者的一种跨平台、面向对象的动态类型编程语言。 Ruby 存在安全漏洞。该漏洞是由于操作控制器中的令牌身份验证逻辑中的“售后使用”错误引起的，远程攻击者可以发送特制请求，并在目标系统上导致拒绝服务。以下产品及版本受到影响：Ruby on Rails：4.0.0、4.0.0 rc1、4.0.0 rc2、4.0.0.beta1、4.0 .1、4.0.1 rc1、4.0.1 rc2、4.0.1 rc3、4.0.1 rc4、4.0.2、4.0.3、4.0.4、4.0.4 rc1、4.0.5
CVSS Information
N/A
Vulnerability Type
N/A