CVE-2023-36617

A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby

published June 29, 2023

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01698 · 77.0th percentile
Published
2023-06-29T00:00Z
EPSS history
Timeline
  • 29 JUN 00:00Z
    A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby
    cvelistv5