Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2024-49761

Опубликовано: 03 дек. 2024
Источник: msrc
CVSS3: 7.5
EPSS Низкий

Описание

REXML ReDoS vulnerability

EPSS

Процентиль: 79%
0.01275
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 года назад

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.

CVSS3: 7.5
redhat
около 1 года назад

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.

CVSS3: 7.5
nvd
около 1 года назад

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.

CVSS3: 7.5
debian
около 1 года назад

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReD ...

CVSS3: 7.5
redos
12 месяцев назад

Уязвимость rubygem-rexml

EPSS

Процентиль: 79%
0.01275
Низкий

7.5 High

CVSS3