CVE-2023-28756

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1

published March 31, 2023

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02452 · 84.3th percentile
Published
2023-03-31T00:00Z
EPSS history
Timeline
  • 31 MAR 00:00Z
    A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1
    cvelistv5