CVE-2023-28755

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1

Medium · published March 31, 2023

CVSS v3.1
5.3
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.02637 · 85.4th percentile
Published
2023-03-31T00:00Z
EPSS history
Timeline
  • 31 MAR 00:00Z
    A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1
    cvelistv5