VULNERABILITY INTELLIGENCE

CVE-2013-4389

CVSS score4.3 MEDIUM
EPSS probability3.14%
CISA KEVNot currently listed
Published2013-10-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references