CVE-2013-1801

CVE-2013-1801 affects the httparty gem 0.9.0 and earlier for Ruby, stemming from improper restriction of string value casts. This vulnerability allows remote attackers to conduct object-injection attacks, potentially leading to arbitrary code execution or denial of service through excessive memory and CPU consumption, similar to CVE-2013-0156. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and it's not listed in CISA's KEV catalog, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.