Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-28965

Опубликовано: 21 апр. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

ignored

end of life
hirsute

ignored

end of life
impish

ignored

end of life
jammy

DNE

precise/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

released

2.3.1-2~ubuntu16.04.16
focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

released

2.5.1-1ubuntu1.9
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

2.5.1-1ubuntu1.9
esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

released

2.7.0-5ubuntu1.4
focal

released

2.7.0-5ubuntu1.4
groovy

released

2.7.1-3ubuntu1.3
hirsute

released

2.7.2-4ubuntu1.1
impish

released

2.7.3-2ubuntu1
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

Показывать по

EPSS

Процентиль: 59%
0.00387
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
больше 4 лет назад

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

CVSS3: 7.5
nvd
больше 4 лет назад

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

CVSS3: 7.5
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 7.5
debian
больше 4 лет назад

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, a ...

suse-cvrf
больше 4 лет назад

Security update for ruby2.5

EPSS

Процентиль: 59%
0.00387
Низкий

5 Medium

CVSS2

7.5 High

CVSS3