Description
WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.
Remediation
References
Related Vulnerabilities
WordPress Plugin Currency Switcher for WooCommerce Security Bypass (2.11.1)
MongoDb Incorrect Comparison Vulnerability (CVE-2019-20925)
WordPress Plugin Network Publisher 'networkpub_key' Parameter Cross-Site Scripting (5.0.1)
silverstripeCMS Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-12245)
WordPress Plugin Admin Custom Login Cross-Site Scripting (2.5.3.1)