CVE-2023-22796

A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116	Patch Vendor Advisory
https://security.netapp.com/advisory/ntap-20240202-0009/
https://www.debian.org/security/2023/dsa-5372
https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116	Patch Vendor Advisory
https://security.netapp.com/advisory/ntap-20240202-0009/
https://www.debian.org/security/2023/dsa-5372

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:activesupport_project:activesupport::::::ruby::*
	cpe:2.3:a:activesupport_project:activesupport::::::ruby::*

History

24 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad DoS basada en expresiones regulares en Active Support anterior a 6.1.7.1 y anterior a 7.0.4.1. Una cadena especialmente diseñada pasada al método underscore puede hacer que el motor de expresiones regulares entre en un estado de retroceso catastrófico. Esto puede hacer que el proceso utilice grandes cantidades de CPU y memoria, lo que lleva a una posible vulnerabilidad DoS.

Information

Published : 2023-02-09 20:15

Updated : 2026-10-24 13:10

NVD link : CVE-2023-22796

Mitre link : CVE-2023-22796

CVE.ORG link : CVE-2023-22796

JSON object : View

Products Affected

activesupport_project

activesupport

CWE

CWE-400

Uncontrolled Resource Consumption

CWE-1333

Inefficient Regular Expression Complexity

{"id": "CVE-2023-22796", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-22796", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-05T21:51:29.512010Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "support@hackerone.com", "affectedData": [{"vendor": "n/a", "product": "https://github.com/rails/rails", "versions": [{"status": "affected", "version": "6.1.7.1, 7.0.4.1"}]}]}], "published": "2023-02-09T20:15:11.487", "references": [{"url": "https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116", "tags": ["Patch", "Vendor Advisory"], "source": "support@hackerone.com"}, {"url": "https://security.netapp.com/advisory/ntap-20240202-0009/", "source": "support@hackerone.com"}, {"url": "https://www.debian.org/security/2023/dsa-5372", "source": "support@hackerone.com"}, {"url": "https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.netapp.com/advisory/ntap-20240202-0009/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.debian.org/security/2023/dsa-5372", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "support@hackerone.com", "description": [{"lang": "en", "value": "CWE-400"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1333"}]}], "descriptions": [{"lang": "en", "value": "A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability."}, {"lang": "es", "value": "Una vulnerabilidad DoS basada en expresiones regulares en Active Support anterior a 6.1.7.1 y anterior a 7.0.4.1. Una cadena especialmente dise\u00f1ada pasada al m\u00e9todo underscore puede hacer que el motor de expresiones regulares entre en un estado de retroceso catastr\u00f3fico. Esto puede hacer que el proceso utilice grandes cantidades de CPU y memoria, lo que lleva a una posible vulnerabilidad DoS."}], "lastModified": "2026-10-24T13:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:activesupport_project:activesupport:*:*:*:*:*:ruby:*:*", "vulnerable": true, "matchCriteriaId": "989A015C-DF4F-4BCF-8637-8CF3094447A3", "versionEndExcluding": "6.1.7.1"}, {"criteria": "cpe:2.3:a:activesupport_project:activesupport:*:*:*:*:*:ruby:*:*", "vulnerable": true, "matchCriteriaId": "EB170255-D891-41DD-A250-C86AF089E5DF", "versionEndExcluding": "7.0.4.1", "versionStartIncluding": "7.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "support@hackerone.com"}