CVE-2012-3424

score

<0.1

cvss

5.0

epss

1.9%

published

2012-08-08

kev added

—

first seen

2026-10-21

Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 contain a denial of service caused by decode_credentials method converting Digest Authentication strings to symbols, letting remote attackers cause denial of service via access to an application using with_http_digest helper, exploit requires access to the application.