CVE-2015-3227 in Ruby on Rails
Résumé (Anglaise)
The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth.
Réserver
10/04/2015
Divulgation
26/07/2015
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 76815 | Ruby on Rails JDOM/REXM rexml.rb déni de service | 404 | Non défini | Correctif officiel | CVE-2015-3227 |