2 lines
4.2 KiB
JSON
2 lines
4.2 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://rubygems.org","defaultStatus":"unaffected","packageName":"encoded_id-rails","packageURL":"pkg:gem/encoded_id-rails","versions":[{"lessThan":"1.0.0.beta2","status":"affected","version":"0","versionType":"custom"}]}],"source":"disclosure@vulncheck.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:diaconou:encodedid\\:\\:rails:*:*:*:*:*:ruby:*:*","matchCriteriaId":"0E952EED-8C83-4839-9648-B77A49E76AAF","versionEndExcluding":"1.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:diaconou:encodedid\\:\\:rails:1.0.0:-:*:*:*:ruby:*:*","matchCriteriaId":"C9886262-80F5-4465-B2A1-867060F8B378","vulnerable":true},{"criteria":"cpe:2.3:a:diaconou:encodedid\\:\\:rails:1.0.0:beta1:*:*:*:ruby:*:*","matchCriteriaId":"CB04E949-0F60-4AB8-B16E-D06E7B02FDBA","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long \"id\" parameter."},{"lang":"es","value":"Las versiones de encoded_id-rails anteriores a 1.0.0.beta2 se ven afectadas por una vulnerabilidad de consumo de recursos incontrolado. Un atacante remoto y no autenticado podría provocar una condición de denegación de servicio enviando una solicitud HTTP con un parámetro \"id\" extremadamente largo."}],"id":"CVE-2024-0241","lastModified":"2026-07-14T23:17:13.130","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0241","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-01-05T20:45:06.578790Z","version":"2.0.3"}}]},"published":"2024-01-04T21:15:09.267","references":[{"source":"disclosure@vulncheck.com","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"disclosure@vulncheck.com","tags":["Patch"],"url":"https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91"},{"source":"disclosure@vulncheck.com","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"disclosure@vulncheck.com","tags":["Third Party Advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-3px7-jm2p-6h2c"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"url":"https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-3px7-jm2p-6h2c"}],"sourceIdentifier":"disclosure@vulncheck.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"disclosure@vulncheck.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-770"}],"source":"nvd@nist.gov","type":"Primary"}]}
|