CVE-2013-6414 medium severity vulnerability detected by WhiteSource

[mend-bolt-for-github]

CVE-2013-6414 - Medium Vulnerability

⚠️ Vulnerable Library - actionpack-3.0.1.gem

path: /tmp/git/sample_app/Gemfile.lock

Dependency Hierarchy:

• factory_girl_rails-1.0.gem (Root Library)
  • rails-3.0.1.gem
    • actionmailer-3.0.1.gem
      • ❌ actionpack-3.0.1.gem (Vulnerable Library)

🔴 Vulnerability Details

actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.

Publish Date: 2013-12-07

URL: CVE-2013-6414

🎯 CVSS 2 Score Details (5.0)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: N/A
  • Attack Complexity: N/A
  • Privileges Required: N/A
  • User Interaction: N/A
  • Scope: N/A
• Impact Metrics:
  • Confidentiality Impact: N/A
  • Integrity Impact: N/A
  • Availability Impact: N/A

---

Want to learn more about the open source vulnerabilities in your products? Click here