CVE-2024-26142 — Vulnetix

CVE-2024-26142 PUBLISHED

Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.

EPSS 3.54% · 87.9th percentile

Risk Scores

EPSS Score

3.54%

87.9th percentile

Affected Products

Vendor	Product	Versions
Open Source	Open Source Ruby on Rails <7.0.8.1
SUSE	SUSE openSUSE
Red Hat	Red Hat Enterprise Linux
Debian	Debian Linux
IBM	IBM License Metric Tool 9.2
Open Source	Open Source Ruby on Rails <6.1.7.7
Open Source	Open Source Ruby on Rails <7.1.3.2
Fedora	Fedora Linux

Exploit Intelligence

CIRCL seen: CVE-2024-26142 (circl-sighting)
CIRCL seen: CVE-2024-26142 (circl-sighting)
CIRCL seen: CVE-2024-26142 (circl-sighting)
[CVE-2024-26142] ReDoS vulnerability in Accept header parsing in Action Dispatch (hackerone)
[CVE-2024-26142] ReDoS vulnerability in Accept header parsing in Action Dispatch (hackerone)
[CVE-2024-26142] ReDoS vulnerability in Accept header parsing in Action Dispatch (hackerone)
https://github.com/rails/rails/security/advisories/GHSA-jjhx-jhvp-74wq (circl)
https://github.com/rails/rails/commit/b4d3bfb5ed8a5b5a90aad3a3b28860c7a931e272 (circl)
https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946 (circl)
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26142.yml (circl)

…and 136 more exploits

Timeline

CVE Published
Jan 21, 1970 Security Advisory
Feb 27, 2024 PoC Published
Feb 27, 2024 PoC Published
Feb 28, 2024 EPSS Score
May 22, 2024 PoC Published
May 23, 2024 PoC Published
Oct 4, 2024 Coalition ESS Score
Feb 14, 2025 Coalition ESS Score
Mar 4, 2025 Coalition ESS Score
Mar 17, 2025 EPSS Score
Mar 29, 2025 EPSS Score

References

Open in Interactive Console →

$ Console Community · 100/wk Open console ›