1. Home
  2. CVE Database
  3. CVE-2023-22799
HIGH · 7.5

CVE-2023-22799

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. A...

Vulnerability Description

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
RubyonrailsGlobalid>= 0.2.1, < 1.0.1

Related Weaknesses (CWE)

CWE-400CWE-1333

References

FAQ

What is CVE-2023-22799?

CVE-2023-22799 is a vulnerability with a CVSS score of 7.5 (HIGH). A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. A...

How severe is CVE-2023-22799?

CVE-2023-22799 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-22799?

Check the references section above for vendor advisories and patch information. Affected products include: Rubyonrails Globalid.