Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby Inefficient Regular Expression Complexity Vulnerability - CVE-2023-28756 - Vulnerability Database
Ruby

Ruby Inefficient Regular Expression Complexity Vulnerability - CVE-2023-28756

High
Reference: CVE-2023-28756
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-28756
Title: Ruby Inefficient Regular Expression Complexity Vulnerability
Overview:

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.