[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fl5GrRQ8B-ALv4k4wfyVujvGB_LVzVvCXOQtV7unFm1M":3,"g5a-risk:CVE-2023-28755":220},{"success":4,"data":5,"meta":217},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":69,"references":70,"referencesCount":150,"weaknesses":151,"weaknessesCount":160,"isActivelyExploited":161,"cisaInfo":26,"otxData":26,"relatedBlogPosts":162,"seoMetadata":163,"configurations":188,"relatedVendorCves":215,"notableEvents":216},"CVE-2023-28755","What is CVE-2023-28755?","A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.","A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters....","2023-03-31T04:15:09.037","2025-11-04T18:15:40.063",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],0.02637,[35,35,35,35,35,35,35],"Medium",[39,44,47,50,53,58,63,66],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"ruby-lang","uri","*","cpe:2.3:a:ruby-lang:uri:*:*:*:*:*:ruby:*:*",{"vendor":40,"product":41,"version":45,"criteria":46,"vulnerable":4},"0.10.1","cpe:2.3:a:ruby-lang:uri:0.10.1:*:*:*:*:ruby:*:*",{"vendor":40,"product":41,"version":48,"criteria":49,"vulnerable":4},"0.11.0","cpe:2.3:a:ruby-lang:uri:0.11.0:*:*:*:*:ruby:*:*",{"vendor":40,"product":41,"version":51,"criteria":52,"vulnerable":4},"0.12.0","cpe:2.3:a:ruby-lang:uri:0.12.0:*:*:*:*:ruby:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":61,"criteria":62,"vulnerable":4},"fedoraproject","fedora","36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":64,"criteria":65,"vulnerable":4},"37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":67,"criteria":68,"vulnerable":4},"38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",8,[71,76,82,86,89,92,95,98,102,106,110,113,117,119,121,124,127,129,131,133,135,137,140,142,144,146,148],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fgithub.com\u002Fruby\u002Furi\u002Freleases\u002F","GitHub",[75],"Release Notes",{"url":77,"source":78,"tags":79},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F04\u002Fmsg00033.html","Debian",[80,81],"Mailing List","Third Party Advisory",{"url":83,"source":84,"tags":85},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF\u002F","Fedoraproject",[],{"url":87,"source":84,"tags":88},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFFZANOQA4RYX7XCB42OO3P24DQKWHEKA\u002F",[],{"url":90,"source":84,"tags":91},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FG76GZG3RAGYF4P75YY7J7TGYAU7Z5E2T\u002F",[],{"url":93,"source":84,"tags":94},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FQA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ\u002F",[],{"url":96,"source":84,"tags":97},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FWMIOPLBAAM3FEQNAXA2L7BDKOGSVUT5Z\u002F",[],{"url":99,"source":100,"tags":101},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202401-27","Gentoo",[],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230526-0003\u002F","Netapp",[81],{"url":107,"source":108,"tags":109},"https:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fdownloads\u002Freleases\u002F","Ruby-lang",[75],{"url":111,"source":108,"tags":112},"https:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fnews\u002F2022\u002F12\u002F25\u002Fruby-3-2-0-released\u002F",[75],{"url":114,"source":108,"tags":115},"https:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fnews\u002F2023\u002F03\u002F28\u002Fredos-in-uri-cve-2023-28755\u002F",[116],"Vendor Advisory",{"url":72,"source":73,"tags":118},[75],{"url":77,"source":78,"tags":120},[80,81],{"url":122,"source":78,"tags":123},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00000.html",[],{"url":125,"source":78,"tags":126},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00015.html",[],{"url":83,"source":84,"tags":128},[],{"url":87,"source":84,"tags":130},[],{"url":90,"source":84,"tags":132},[],{"url":93,"source":84,"tags":134},[],{"url":96,"source":84,"tags":136},[],{"url":138,"source":84,"tags":139},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF\u002F",[],{"url":99,"source":100,"tags":141},[],{"url":103,"source":104,"tags":143},[81],{"url":107,"source":108,"tags":145},[75],{"url":111,"source":108,"tags":147},[75],{"url":114,"source":108,"tags":149},[116],27,[152],{"id":153,"name":154,"description":155,"extendedDescription":156,"status":157,"abstraction":158,"structure":159},"CWE-1333","Inefficient Regular Expression Complexity","The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.","Some regular expression engines have a feature called \"backtracking\". If the token cannot match, the engine \"backtracks\" to a position that may result in a different token that can match.\n                Backtracking becomes a weakness if all of these conditions are met:","Draft","Base","Simple",1,false,[],{"title":164,"metaDescription":165,"keywords":166,"canonicalUrl":167,"structuredData":168},"What is CVE-2023-28755? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28755, a medium severity cyber security vulnerability from 2023. A ReDoS issue was discovered in the URI component through...","CVE-2023-28755, CVE-2023-28755 vulnerability, CVE-2023-28755 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, ruby-lang security, debian security, fedoraproject security, uri vulnerability, debian_linux vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2023-28755",{"@context":169,"@type":170,"headline":164,"description":165,"datePublished":10,"dateModified":11,"author":171,"publisher":175,"about":179,"mainEntityOfPage":183,"articleSection":186,"keywords":187},"https:\u002F\u002Fschema.org","TechArticle",{"@type":172,"name":173,"url":174},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":172,"name":173,"url":174,"logo":176},{"@type":177,"url":178},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":180,"name":6,"description":181,"additionalType":182},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":184,"@id":185},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28755","Cybersecurity","CVE-2023-28755, CVE-2023-28755 vulnerability, CVE-2023-28755 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[189,203],{"Operator":26,"Negate":26,"Nodes":190},[191],{"Operator":192,"Negate":161,"CPEMatch":193},"OR",[194,197,199,201],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":196},"ADDFECF7-5F46-498B-9862-55DA03C8F07B","0.10.0",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":198,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9AEC0027-E0D8-4E68-BDFC-6FAEFF01FEEA",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":200,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3D764446-C057-4529-B486-CA7C9D38E48A",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8C229D83-75B1-4874-B2A9-764FBA12C517",{"Operator":26,"Negate":26,"Nodes":204},[205],{"Operator":192,"Negate":161,"CPEMatch":206},[207,209,211,213],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":210,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":212,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":214,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",[],[],{"lastModified":11,"cacheTime":218,"version":219},1792259364311,"2.0",{"score":221,"band":222,"action":223,"scoredAt":224},22,"Low","Monitor","2026-10-16T06:57:36.1104+00:00"]