Description

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.

Remediation

References

CVE-2019-5419

Related Vulnerabilities

WordPress Plugin Integration for WooCommerce and QuickBooks Cross-Site Scripting (1.1.8)

WordPress Plugin Wordpress Countdown Widget Cross-Site Scripting (3.1.9.2)

phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-12616)

WordPress Plugin Facebook With Login Multiple Vulnerabilities (1.0)

Oracle JRE CVE-2020-14792 Vulnerability (CVE-2020-14792)

Severity

High

Classification

CVE-2019-5419 CWE-770 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities