CVE-2024-25126

Summary

CVE-2024-25126 is a vulnerability affecting the Rack web server interface, which is written in Ruby. Maliciously crafted content type headers can induce Rack's media type parser to engage in time-consuming processing, potentially causing a denial-of-service condition known as ReDos (Second-degree polynomial). Users are advised to update their installations to the patched versions 3.0.9.1 and 2.2.8.1 to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.