CVE-2015-7581: Object leak vulnerability for wildcard controller routes

February 15, 2016 (updated August 8, 2019)

Users that have a route that contains the string :controller are susceptible to objects being leaked globally which can lead to unbounded memory growth. To identify if your application is vulnerable, look for routes that contain :controller.

References

groups.google.com/forum/

Code Behaviors & Features

Detect and mitigate CVE-2015-7581 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →