Description
actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application's use of a wildcard controller route.
Remediation
References
Related Vulnerabilities
WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Scripting (4.5.0)
Apache Tomcat Other Vulnerability (CVE-2005-4703)
WordPress Plugin Mail Subscribe List Unspecified Vulnerability (2.0.9)
PHP Out-of-bounds Write Vulnerability (CVE-2024-11233)
MediaWiki Improper Input Validation Vulnerability (CVE-2017-8814)