CVE-2019-5419CWE-400

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can…

published March 27, 2019

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08778 · 95.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2019-03-27T13:43Z
EPSS history
Timeline
  • 27 MAR 13:43Z
    There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can…
    cvelistv5