CVE-2023-28755

HIGH7.5EPSS 0.34%

Ruby URI component ReDoS issue

發布日:2023/3/31修改日:2026/4/28
也稱為:GHSA-hv5j-3h9f-99c2ALPINE-CVE-2023-28755CGA-p527-8q57-2j5mDEBIAN-CVE-2023-28755

描述

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

受影響套件(7)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

參考連結(23)