You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Rack vulnerable to ReDoS in content type parsing (2nd degree polynomial)
Moderate severity
GitHub Reviewed
Published
Feb 28, 2024
in
rack/rack
•
Updated Jun 10, 2024
Summary
The above regexp is subject to ReDos. 50K blank characters as a prefix to the header will take over 10s to split.
PoC
A simple HTTP request with lots of blank characters in the content-type header:
Impact
It's a very easy to craft ReDoS. Like all ReDoS the impact is debatable.
References