Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-58767

Опубликовано: 17 сент. 2025
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*
Версия от 3.3.3 (включая) до 3.4.2 (исключая)

EPSS

Процентиль: 4%
0.00019
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

CVSS3: 2.9
redhat
около 2 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

msrc
около 2 месяцев назад

REXML has a DoS condition when parsing malformed XML file

CVSS3: 5.3
debian
около 2 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 h ...

github
около 2 месяцев назад

REXML has DoS condition when parsing malformed XML file

EPSS

Процентиль: 4%
0.00019
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-400