HackeroneCVELIST:CVE-2022-30122

HistoryDec 05, 2022 - 12:00 a.m.

CVE-2022-30122

2022-12-0500:00:00

CWE-400

hackerone

www.cve.org

cve-2022-30122

rack

multipart parsing

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "https://github.com/rack/rack",
    "versions": [
      {
        "version": "2.0.9.1, 2.1.4.1, 2.2.3.1",
        "status": "affected"
      }
    ]
  }
]

References

discuss.rubyonrails.org/t/cve-2022-30122-denial-of-service-vulnerability-in-rack-multipart-parsing/80729

security.gentoo.org/glsa/202310-18

security.netapp.com/advisory/ntap-20231208-0012/

CVE-2022-30122

CNA Affected

References

Related