description: There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.
problem types: Denial of Service (CWE-400)
affected:
{
product: Rack
vendor: Rack
versions:
status: affected, version: 2.0.6
}