VDB
BDU%3A2025-13874
BDU%3A2025-13874
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость класса Rack::Request#POST модульного интерфейса между веб-серверами и веб-приложениями Rack, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Novell Inc., Сообщество свободного программного обеспечения, ООО «Ред Софт», Leah Neukirchen | Red Hat Enterprise Linux, OpenSUSE Leap, SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, Red Hat 3scale API Management Platform, Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), Rack |
Timeline
- Nov 7, 2025 CVE Published
- Nov 14, 2025 CVE Updated
References
- https://access.redhat.com/security/cve/cve-2025-61919 url
- https://www.suse.com/security/cve/CVE-2025-61919.html url
- https://github.com/rack/rack/commit/cbd541e8a3d0c5830a3c9a30d3718ce2e124f9db advisory
- https://github.com/rack/rack/commit/e179614c4a653283286f5f046428cbb85f21146f advisory
- https://github.com/rack/rack/security/advisories/GHSA-6xw4-3v39-52mm advisory
- https://security-tracker.debian.org/tracker/CVE-2025-61919 advisory
- https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-rubygem-rack-06112025/?sphrase_id=1345283 advisory
- https://github.com/rack/rack/commit/4e2c903991a790ee211a3021808ff4fd6fe82881 url
- https://www.cybersecurity-help.cz/vdb/SB2025110402 url