tocsin

Debian/rails: high 7.5

A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expressio

Action: Upgrade rails to 2:6.1.7.3+dfsg-1 or later.

Affected

introducedfixedlast affected
02:6.1.7.3+dfsg-1-

Fixed versions

2:6.1.7.3+dfsg-1

Sources

published · modified · JSON