Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-58767

Опубликовано: 17 сент. 2025
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*
Версия от 3.3.3 (включая) до 3.4.2 (исключая)

EPSS

Процентиль: 6%
0.00024
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.3
ubuntu
5 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

CVSS3: 2.9
redhat
5 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

CVSS3: 7.5
msrc
5 месяцев назад

REXML has a DoS condition when parsing malformed XML file

CVSS3: 5.3
debian
5 месяцев назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 h ...

CVSS3: 5.3
redos
3 месяца назад

Уязвимость rubygem-rexml

EPSS

Процентиль: 6%
0.00024
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-400