CVEs-PoC/2019/CVE-2019-5419.md

CVE-2019-5419

Description

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.

POC

Reference

No PoCs from references.

Github

• https://github.com/mpgn/CVE-2019-5418
• https://github.com/mpgn/Rails-doubletap-RCE