Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2019-5419 - Vulnerability Database
Ruby on Rails

Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2019-5419

High
Reference: CVE-2019-5419
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-5419
Title: Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability
Overview:

There is a possible denial of service vulnerability in Action View (Rails) lt5.2.2.1 lt5.1.6.2 lt5.0.7.2 lt4.2.11.1 where specially crafted accept headers can cause action view to consume 100 cpu and make the server unresponsive.