CVE-2023-22799 | BDVDB-2026-195072 Detail

https://github.com/rails/globalid

Description#

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-400 Uncontrolled Resource Consumption

References#

https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127

Exploit#

No public exploit known

History#

Version 12023-02-09Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.