CVEs-PoC/2015/CVE-2015-7581.md

CVE-2015-7581

Description

actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application's use of a wildcard controller route.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Abinandhini-cpu/VulnerableRubyrepo2
• https://github.com/CherMB/test-data-ingestion-service
• https://github.com/CherMB/test-data-ingestion-service-1
• https://github.com/CherMB/test-qa-blackduck
• https://github.com/bibin-paul-trustme/ruby_repo
• https://github.com/jasnow/585-652-ruby-advisory-db
• https://github.com/rubysec/ruby-advisory-db
• https://github.com/shunmugadigialert/ruby5
• https://github.com/zhangyongbo100/-Ruby-dl-handle.c-CVE-2009-5147-