CVE-2012-3424

CVE-2012-3424 describes a denial-of-service vulnerability in Ruby on Rails versions 3.x, 3.1.x, and 3.2.x, specifically within the decode_credentials method. This flaw allows remote attackers to trigger a denial of service by sending crafted Digest Authentication strings, which are incorrectly converted to symbols when an application uses a with_http_digest helper method. The vulnerability has a CVSS score of 5.0 (medium severity) with an AV:N/AC:L/Au:N/C:N/I:N/A:P vector, indicating it can be exploited remotely with low complexity to cause partial availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.