CVE-2015-4412

Name of the Vulnerable Software and Affected Versions bson-ruby gem versions prior to 3.0.4

Description The issue allows remote attackers to cause a denial of service or inject arbitrary data via a crafted string, exploiting a BSON injection vulnerability in the legal? function.

Recommendations For versions prior to 3.0.4, update to version 3.0.4 or later to resolve the issue. As a temporary workaround, consider restricting input to the legal? function to minimize the risk of exploitation.