Dashboard / CVE-2023-22799

CVE-2023-22799

HIGH
MEDIUM Priority: 0.08 BB Relevance: 75/100
Published: 2023-02-09 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
rubyonrails globalid 0.2.1 – 1.0.1

References & Advisories (1)

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

1.05%
Raw Score 0.010490
Percentile 64.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.01049
2026-10-28
0.01049

Intelligence Sources

nvd ref →

External Links