encoded_id-rails versions before... CVE-2024-0241

- AV AC AU C I A
发布: 2024-01-04
修订: 2024-01-10

encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long "id" parameter.

0%
暂无可用Exp或PoC
当前有3条受影响产品信息