CVE-2015-3225

lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a…

published July 26, 2015

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07991 · 94.7th percentile
Published
2015-07-26T22:00Z
EPSS history
Timeline
  • 26 JUL 22:00Z
    lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a…
    cvelistv5