CVE-2013-1821 in Ruby

요약

\~에 의해 MITRE

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 예약하다: 2013. 02. 19.
• 공개: 2013. 04. 09.
• 모더레이션: 수락
• 항목: VDB-7822
• CPE: 준비됨
• CWE: CWE-20 (확인됨)
• CVSS: 5.0 (NVD)
• EPSS: 0.06671
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Chemical, Energy, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-1821
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1821
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-1821/