Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby 安全漏洞
Vulnerability Description
Ruby是松本行弘个人开发者的一种跨平台、面向对象的动态类型编程语言。 Ruby 0.12.2 之前版本存在安全漏洞，该漏洞源于URI 组件中发现了 ReDoS 问题，URI 解析器错误地处理具有特定字符的无效 URL，使用 rfc2396_parser.rb 和 rfc3986_parser.rb 将字符串解析为 URI 对象的执行时间会增加。
CVSS Information
N/A
Vulnerability Type
N/A