CVE-2008-3790 in Ruby

Summary

The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an "XML entity explosion."

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 08/26/2008
• Disclosure: 08/27/2008
• Moderation: VulDB entry created
• Entries: VDB-3810 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• Exploit: Download
• CVSS: 7.5
• EPSS: 0.28838
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-3790
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-3790
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-3790/