Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

David Cramer

#49383of 53,624
5Total CVSS
Vulnerabilities · 1
PT-2015-4240
5.0
2015-01-20
Ruby · Raven-Ruby · CVE-2014-9490
**Name of the Vulnerable Software and Affected Versions** raven-ruby gem versions prior to 0.12.2 **Description** The issue allows remote attackers to cause a denial of service via a large exponent value in a scientific number, specifically targeting the `numtok` function in `lib/raven/okjson.rb`. **Recommendations** For versions prior to 0.12.2, update to version 0.12.2 or later to resolve the issue. As a temporary workaround, consider restricting input to the `numtok` function to prevent large exponent values in scientific numbers.