Not rated

CVE-2023-22799 A ReDoS based DoS vulnerability in the…

Description

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.

Affected products and versions

Product	Affected versions	Fixed in
https://github.com/rails/globalid	1.0.1	No fix stated

Do you use https://github.com/rails/globalid?

Track this CVE Watch https://github.com/rails/globalid Check my SBOMs

www.cveye.io/en/cve/CVE-2023-22799

Timeline

Published February 9, 2023
Last modified August 2, 2024

References

discuss.rubyonrails.org discuss.rubyonrails.org

Track this CVE