CVE-2015-7581

score

<0.1

cvss

7.5

epss

6.7%

published

2016-02-16

kev added

—

first seen

2026-10-21

Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 contains a denial of service caused by superfluous caching and memory consumption in route_set.rb, letting remote attackers cause denial of service via wildcard controller routes, exploit requires use of such routes.