actionpack Improper Input Validation vulnerability (GHSA-7cgp-c3g7-qvrw)
Published: 2017-10-24T18:33:36Z
Aliases: CVE-2014-0082
Severity: MODERATE · CWE: CWE-20

`actionpack/lib/action_view/template/text.rb` in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the `:text` option to the `render` method, which allows remote attackers to cause a denial of service (memory consumption) by including these strings in headers.

Affected packages:
package: ecosystem: RubyGems
name: actionpack
ranges: type: ECOSYSTEM
events: introduced: 3.0.0
fixed: 3.2.17