Description

actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.

Remediation

References

CVE-2013-6414

Related Vulnerabilities

Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-5174)

WordPress Plugin BSK PDF Manager Multiple Cross-Site Scripting Vulnerabilities (1.3)

WordPress Plugin Usernoise modal feedback/contact form Cross-Site Scripting (3.7.8)

Ruby Integer Overflow or Wraparound Vulnerability (CVE-2008-2663)

WordPress Plugin WP Simple Cart Arbitrary File Upload (1.0.15)

Severity

Medium

Classification

CVE-2013-6414 CWE-20

Tags

Missing Update Known Vulnerabilities