Description
Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message.
Remediation
References
Related Vulnerabilities
WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability (0.6.2 - 2.3.2)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5610)
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33334)
Apache HTTP Server Other Vulnerability (CVE-2003-0253)
Apache HTTP Server Numeric Errors Vulnerability (CVE-2003-1580)