CVEs-PoC/2021/CVE-2021-41817.md

CVE-2021-41817

Description

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/engn33r/awesome-redos-security
• https://github.com/lifeparticle/Ruby-Cheatsheet