rapid7/metasploit-framework — pull request #2724 by wchen-r7 (2013-12-04 23:24:05+00:00)
Title: Ruby on Rails Action view Denial of Service

This module exploits a Denial of Service (DoS) condition in the handling of MIME caching of Action View. By sending a specially crafted content-type header to a rails application, it is possible for it to store the invalid MIME type, and may eventually consumes all memory if enough invalid MIMEs are given.

Versions 3.0.0 and other later versions are affected, fixed in 4.0.2 and 3.2.16.