CVE-2013-4389

score

<0.1

cvss

4.3

epss

3.1%

published

2013-10-17

kev added

—

first seen

2026-10-21

Ruby on Rails 3.x before 3.2.15 contains multiple format string vulnerabilities in log_subscriber.rb within Action Mailer, causing denial of service via crafted email addresses during log message construction, exploit requires remote attacker to send malicious email.