CVE-2012-6109

CVE-2012-6109 is a denial-of-service vulnerability affecting Rack versions prior to 1.1.4, 1.2.6, 1.3.7, and 1.4.2. An attacker can exploit an incorrect regular expression in lib/rack/multipart.rb by sending a specially crafted Content-Disposition header, leading to an infinite loop. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial availability impact, with no confidentiality or integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.