Description
There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.
Remediation
References
Related Vulnerabilities
Joomla CVE-2012-0836 Vulnerability (CVE-2012-0836)
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60198)
Handlebars Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-33939)
Grafana Authentication Bypass by Spoofing Vulnerability (CVE-2023-3128)
WordPress Plugin Modern Events Calendar Arbitrary File Upload (7.11.0)