Description
The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service (catastrophic regular expression backtracking, resource consumption, or application crash) via a crafted string.
Remediation
References
Related Vulnerabilities
WordPress Plugin Product Input Fields for WooCommerce Arbitrary File Download (1.2.6)
Oracle Database Server Improper Input Validation Vulnerability (CVE-2018-1000873)
Moodle Improper Access Control Vulnerability (CVE-2020-25629)
WordPress Plugin Stock in & out Cross-Site Scripting (1.0.4)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2017-1000014)