Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-58767

Опубликовано: 17 сент. 2025
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*
Версия от 3.3.3 (включая) до 3.4.2 (исключая)

EPSS

Процентиль: 14%
0.00248
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 года назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

CVSS3: 5.3
redhat
около 1 года назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

CVSS3: 7.5
msrc
около 1 года назад

REXML has a DoS condition when parsing malformed XML file

CVSS3: 5.3
debian
около 1 года назад

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 h ...

CVSS3: 5.3
redos
11 месяцев назад

Уязвимость rubygem-rexml

EPSS

Процентиль: 14%
0.00248
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-400