RubyGems/user_agent_parser CVE-2020-5243: medium 5.7, EPSS 2.29%
Denial of Service in uap-core when processing crafted User-Agent strings
Action: Upgrade user_agent_parser to 2.6.0 or later.
bundle update user_agent_parserAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.0 | - |
Fixed versions
| 2.6.0 |
Sources
- osv: GHSA-cmcx-xhr8-3w9p#RubyGems/user_agent_parser
- https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p
- https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw
- https://nvd.nist.gov/vuln/detail/CVE-2020-5243
- https://github.com/ua-parser/uap-core/commit/0afd61ed85396a3b5316f18bfd1edfaadf8e88e1
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/user_agent_parser/CVE-2020-5243.yml
CVE-2020-5243 · published · modified · JSON