[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6T2I9fKBpb1g1FgxBQ7b5pA4DPKnkKdyuio3YC3-lbU":3,"g5a-risk:CVE-2023-36617":129},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":74,"weaknesses":75,"weaknessesCount":40,"isActivelyExploited":84,"cisaInfo":26,"otxData":26,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":124,"notableEvents":125},"CVE-2023-36617","What is CVE-2023-36617?","A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.","A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an i...","2023-06-29T13:15:09.583","2025-11-04T18:15:40.907",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[],[],0.01698,[31,31,31,31,31,31,31],"Medium",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"ruby-lang","uri","*","cpe:2.3:a:ruby-lang:uri:*:*:*:*:*:ruby:*:*",1,[42,46,49,53,59,63,65,67,70,72],{"url":43,"source":44,"tags":45},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF\u002F","Fedoraproject",[],{"url":47,"source":44,"tags":48},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FQA6XUKUY7B5OLNQBLHOT43UW7C5NIOQQ\u002F",[],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230725-0002\u002F","Netapp",[],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fnews\u002F2023\u002F06\u002F29\u002Fredos-in-uri-CVE-2023-36617\u002F","Ruby-lang",[57,58],"Mitigation","Vendor Advisory",{"url":60,"source":61,"tags":62},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00000.html","Debian",[],{"url":43,"source":44,"tags":64},[],{"url":47,"source":44,"tags":66},[],{"url":68,"source":44,"tags":69},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF\u002F",[],{"url":50,"source":51,"tags":71},[],{"url":54,"source":55,"tags":73},[57,58],10,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-1333","Inefficient Regular Expression Complexity","The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.","Some regular expression engines have a feature called \"backtracking\". If the token cannot match, the engine \"backtracks\" to a position that may result in a different token that can match.\n                Backtracking becomes a weakness if all of these conditions are met:","Draft","Base","Simple",false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2023-36617? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-36617, a medium severity cyber security vulnerability from 2023. A ReDoS issue was discovered in the URI component before ...","CVE-2023-36617, CVE-2023-36617 vulnerability, CVE-2023-36617 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, ruby-lang security, uri vulnerability","\u002Fwhat-is\u002Fcve-2023-36617",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-36617","Cybersecurity","CVE-2023-36617, CVE-2023-36617 vulnerability, CVE-2023-36617 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112],{"Operator":26,"Negate":26,"Nodes":113},[114],{"Operator":115,"Negate":84,"CPEMatch":116},"OR",[117,120],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":119,"VersionEndIncluding":26},"06CEBB34-129C-4B37-97B8-AB07821FEF47","0.10.3",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":26},"8975D88A-EAD0-4A3F-AB3E-1F768AAFFFBD","0.11.0","0.12.2",[],[],{"lastModified":11,"cacheTime":127,"version":128},1792259364272,"2.0",{"score":130,"band":131,"action":132,"scoredAt":133},29,"Low","Monitor","2026-10-16T06:58:25.469764+00:00"]