Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-41123

Опубликовано: 01 авг. 2024
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, >] and ]>. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*
Версия до 3.2.7 (исключая)
cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*
Версия от 3.2.8 (включая) до 3.3.2 (исключая)

EPSS

Процентиль: 61%
0.0042
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-400
CWE-400

Связанные уязвимости

CVSS3: 5.3
ubuntu
11 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.

CVSS3: 5.3
redhat
11 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.

CVSS3: 5.3
debian
11 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some ...

CVSS3: 7.5
github
11 месяцев назад

REXML DoS vulnerability

CVSS3: 7.5
fstec
11 месяцев назад

Уязвимость набора инструментов XML для Ruby REXML, связанная с неконтролируемым потреблением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 61%
0.0042
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-400
CWE-400