cve.bz

CVE-2006-6303

no score yetEPSS 3.8%

yukihiro matsumoto ruby: no CVSS score yet. EPSS 3.8% chance of exploitation in the next 30 days.

The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.
EPSS
3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE
CWE-399
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON