CVE-2013-1821 in Ruby

Resumen

por MITRE

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 2013-02-19
• Divulgación: 2013-04-09
• Moderación: aceptado
• Artículo: VDB-7822
• CPE: listo
• CWE: CWE-20 (confirmado)
• CVSS: 5.0 (NVD)
• EPSS: 0.06671
• KEV: no
• Actividades: muy bajo
• Sector: Pharma, Energy, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-1821
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1821
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-1821/