CVE-2021-22902

Related Vulnerabilities: CVE-2021-22902  

A flaw was found in RubyGem Actionpack which is framework for handling and responding to web requests in Rails. A possible Denial of Service vulnerability was found in the Mime type parser of Action Dispatch.

Description

A flaw was found in RubyGem Actionpack which is framework for handling and responding to web requests in Rails. A possible Denial of Service vulnerability was found in the Mime type parser of Action Dispatch.

Additional Information

  • Bugzilla 1961382: CVE-2021-22902 rails: Possible Denial of Service vulnerability in Action Dispatch
  • CWE-400: Uncontrolled Resource Consumption
  • FAQ: Frequently asked questions about CVE-2021-22902