CVE-2024-0241

encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long "id" parameter.

• CWE-400
• CWE-770

• https://github.com/advisories/GHSA-3px7-jm2p-6h2cExploit, Third Party Advisory
• https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91Patch
• https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2cExploit, Vendor Advisory
• https://vulncheck.com/advisories/vc-advisory-GHSA-3px7-jm2p-6h2cThird Party Advisory
• https://github.com/advisories/GHSA-3px7-jm2p-6h2cExploit, Third Party Advisory
• https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91Patch
• https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2cExploit, Vendor Advisory
• https://vulncheck.com/advisories/vc-advisory-GHSA-3px7-jm2p-6h2cThird Party Advisory

Published

Jan 4, 2024

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0235The EventON WordPress plugin before 4.5.5, EventON WordPress…5.3
• CVE-2024-0236The EventON WordPress plugin before 4.5.5, EventON WordPress…5.3
• CVE-2024-0237The EventON WordPress plugin through 4.5.8, EventON WordPres…5.3
• CVE-2024-0238The EventON Premium WordPress plugin before 4.5.6, EventON W…6.1
• CVE-2024-0239The Contact Form 7 Connector WordPress plugin before 1.2.3 d…6.1
• CVE-2024-0240A memory leak in the Silicon Labs' Bluetooth stack for EFR32…6.5
• CVE-2024-0242Under certain circumstances IQ Panel4 and IQ4 Hub panel soft…9.8
• CVE-2024-0243With the following crawler configuration: ```python from bs…8.1
• CVE-2024-0244Buffer overflow in CPCA PCFAX number process of Office Multi…9.8
• CVE-2024-0245A misconfiguration in the AndroidManifest.xml file in hamza4…5.5
• CVE-2024-0246A vulnerability classified as problematic has been found in …6.1
• CVE-2024-0247A vulnerability classified as critical was found in CodeAstr…9.8