Resource exhaustion in Rubyonrails Rails
CVE-2021-22902
The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.028 (85.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Rubyonrails Rails
- N/a Https://github.com/rails/rails — versions Fixed in 6.0.3.7, 6.1.3.2
Weakness classification (CWE)
Public proof-of-concept exploits
References
- support@hackerone.com (Permissions Required, Third Party Advisory, x_refsource_MISC)
- support@hackerone.com (Exploit, Patch, x_refsource_MISC, Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-22902?
- CVE-2021-22902 is a high-severity vulnerability in Rubyonrails Rails, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2021-06-11.
- How severe is CVE-2021-22902?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2021-22902 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.