🎯 New Report #2389431: Action Text ReDoS (Ruby 3.1 or lower)
🔺Severity: Low
👽 Reporter: ooooooo q
⭐️ Reputation: 1581
🛠 State: resolved
💼 Team: Ruby on Rails
💵 Bounty: null
🕐 Submitted: 2024-02-25
⏰ Disclosed: 2026-06-09 04:37:55
📝 Summary: A vulnerability was discovered in the ActionText component of the Rails web framework for Ruby versions 3.1 and lower. The vulnerability was caused by a Regular Expression Denial of Service (ReDoS) issue in the plain text for blockquote node method. This method was used in the ActionText::Fragment#to plain text functionality. The vulnerability could be triggered by crafting malicious text and calling the to plain text method. The vulnerability was resolved in later versions of Ruby.
📂 Report JSON File: 2389431
@hackeronereports