CVE-2024-47887

MEDIUM

Possible ReDoS vulnerability in HTTP Token authentication in Action Controller

Published October 15, 2024Updated October 31, 2024Source: osv

Summary

There is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. This vulnerability has been assigned the CVE identifier CVE-2024-47887. Impact ------ For applications using HTTP Token authentication via `authenticate_or_request_with_http_token` or similar, a carefully crafted header may cause header parsing to take an unexpected amount of time, possibly resulting in a DoS vulnerability. All users running an affected release should either upgrade or apply the relevant patch immediately. Ruby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 depends on Ruby 3.2 or greater so is unaffected. Releases -------- The fixed releases are available at the normal locations. Workarounds ----------- Users on Ruby 3.2 are unaffected by this issue. Credits ------- Thanks to [scyoon](https://hackerone.com/scyoon) for reporting

Remediation

Upgrade to the fixed version using your package manager.

Bundler

Update actionpack to 7.0.8.5 or later

gem install actionpack -v 7.0.8.5

Bundler

Update actionpack to 7.1.4.1 or later

gem install actionpack -v 7.1.4.1

Bundler

Update actionpack to 7.2.1.1 or later

gem install actionpack -v 7.2.1.1

Bundler

Update actionpack to 6.1.7.9 or later

gem install actionpack -v 6.1.7.9

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (4)

Package	Ecosystem	Affected	Fixed In
actionpack	rubygems	7.0.0, 7.0.1, 7.0.2, 7.0.2.1 (+20 more)	7.0.8.5
actionpack	rubygems	7.1.0, 7.1.1, 7.1.2, 7.1.3 (+5 more)	7.1.4.1
actionpack	rubygems	7.2.0, 7.2.1	7.2.1.1
actionpack	rubygems	4.0.0, 4.0.1, 4.0.1.rc1, 4.0.1.rc2 (+242 more)	6.1.7.9

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-1333
View on MITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 7.5 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

—

Confidentiality

—

Integrity

—

Availability

—

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U

References

Frequently Asked Questions

What is CVE-2024-47887?: Possible ReDoS vulnerability in HTTP Token authentication in Action Controller This vulnerability has been assigned a severity rating of MEDIUM (CVSS score: 7.5/10).
How do I check if my project is affected by CVE-2024-47887?: CVE-2024-47887 affects actionpack. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2024-47887 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

7.5

High exploitability or significant impact. Prioritize remediation within days.

Also Known As

GHSA-vfg9-r3fq-jvx4

BIT-rails-2024-47887

Related CVEs

CVE-2016-2098
HIGH
actionpack allows remote code execution via application's unrestricted use of render method
CVE-2021-22904
HIGH
Possible DoS Vulnerability in Action Controller Token Authentication
CVE-2020-8164
HIGH
Possible Strong Parameters Bypass in ActionPack
CVE-2015-7581
HIGH
actionpack is vulnerable to denial of service because of a wildcard controller route
CVE-2016-0751
HIGH
actionpack is vulnerable to denial of service via a crafted HTTP Accept header
CVE-2023-22797
MEDIUM
Open Redirect Vulnerability in Action Pack
CVE-2024-26143
MEDIUM
Rails has possible XSS Vulnerability in Action Controller
CVE-2020-8185
MEDIUM
Untrusted users can run pending migrations in production in Rails

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies