ruby-lang uri vulnerabilities and exploits

(subscribe to this query)

A ReDoS issue exists in the URI component up to and including 0.12.0 in Ruby up to and including 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1,...

Ruby-lang Uri 0.12.0 Ruby-lang Uri 0.10.1 Ruby-lang Uri Ruby-lang Uri 0.11.0 Debian Debian Linux 10.0 Fedoraproject Fedora 36 Fedoraproject Fedora 37 Fedoraproject Fedora 38

A ReDoS issue exists in the URI component prior to 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exist...

1 Github repository

Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and previous versions, 1.8.5 prior to 1.8.5-p231, 1.8.6 prior to 1.8.6-p230, 1.8.7 prior to 1.8.7-p22, and 1.9.0 prior to 1.9.0-2, when using NTFS or FAT filesystems, allows remote malicious users to read arbitrary CGI fi...

Ruby-lang Ruby 1.8.5 Ruby-lang Ruby 1.8.6 Ruby-lang Ruby

A ReDoS issue exists in the Time component up to and including 0.2.1 in Ruby up to and including 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1...

Ruby-lang Time 0.2.1 Ruby-lang Time 0.1.0 Ruby-lang Ruby Debian Debian Linux 10.0 Fedoraproject Fedora 36 Fedoraproject Fedora 37 Fedoraproject Fedora 38

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook