Security Advisory
CVE-2019-16201
7.5
HIGH
Vulnerability Description
WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network.
Published Date
November 26, 2019
Official Source
NIST NVD Advisory