Denial Of Service (DoS)

2021-05-0606:23:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

60.8%

JSON

actionpack is vulnerable to denial of service. An attacker is able to use authenticate_or_request_with_http_token or authenticate_with_http_token for request authentication to cause an application crash.

CPENameOperatorVersion
actionpackeq5.2.5
actionpackle5.2.4.5
actionpackle6.1.3.1
actionpackle6.0.3.6
rails:stretcheq2:4.2.7.1-1+deb9u2
rails:sideq2:6.0.3.4+dfsg-1
rails:bustereq2:5.2.2.1+dfsg-1+deb10u1
rails:bustereq2:5.2.2.1+dfsg-1+deb10u2
rails:bullseyeeq2:6.0.3.4+dfsg-1
tfm-rubygem-railseq6.0.3.1__1.el7sat

Name	Operator	Version
actionpack	eq	5.2.5
actionpack	le	5.2.4.5
actionpack	le	6.1.3.1
actionpack	le	6.0.3.6
rails:stretch	eq	2:4.2.7.1-1+deb9u2
rails:sid	eq	2:6.0.3.4+dfsg-1
rails:buster	eq	2:5.2.2.1+dfsg-1+deb10u1
rails:buster	eq	2:5.2.2.1+dfsg-1+deb10u2
rails:bullseye	eq	2:6.0.3.4+dfsg-1
tfm-rubygem-rails	eq	6.0.3.1__1.el7sat