Description

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.

Remediation

References

CVE-2023-28756

Related Vulnerabilities

WordPress Plugin Brizy-Page Builder Unspecified Vulnerability (2.4.45)

WordPress Plugin WP Reactions Lite Cross-Site Scripting (1.3.5)

WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions Unspecified Vulnerability (2.10.5)

Sqlite NULL Pointer Dereference Vulnerability (CVE-2019-19926)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28038)

Severity

High

Classification

CVE-2023-28756 CWE-1333 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities