CVE-2023-27530
1 advisory.
RubyGems/rack CVE-2023-27530: high 7.5, EPSS 1.83%
Rack has possible DoS Vulnerability in Multipart MIME parsing
Action: Upgrade rack to 2.0.9.3 or later.
bundle update rackAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.9.3 | - |
| 2.1.0 | 2.1.4.3 | - |
| 2.2.0 | 2.2.6.3 | - |
| 3.0.0 | 3.0.4.2 | - |
Fixed versions
| 2.0.9.3 | 2.1.4.3 | 2.2.6.3 | 3.0.4.2 |
Sources
- osv: GHSA-3h57-hmj3-gj3p
- https://nvd.nist.gov/vuln/detail/CVE-2023-27530
- https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388
- https://github.com/rack/rack
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2023-27530.yml
- https://lists.debian.org/debian-lts-announce/2023/04/msg00017.html
- https://security.netapp.com/advisory/ntap-20231208-0015
- https://www.debian.org/security/2023/dsa-5530
CVE-2023-27530 · published · modified · JSON