CVE-2025-27220 - CERT CVE
ID CVE-2025-27220
Sažetak In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.
Reference
CVSS
Base: 4.0
Impact: 1.4
Exploitability:2.2
Pristup
VektorSloženostAutentikacija
NETWORK HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE LOW
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L
Zadnje važnije ažuriranje 05-03-2025 - 14:05
Objavljeno 04-03-2025 - 00:15