CVE-2013-6414 REJECTED

actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.

EPSS 70.84% · 98.7th percentile

Risk Scores

EPSS Score
70.84%
98.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSruby-actionpack-3.20, 3.2.13-7

Timeline

References

Open in Interactive Console →