CVE-2013-1821 in Ruby

Sumário

de MITRE

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 19/02/2013
• Divulgação: 09/04/2013
• Moderação: aceite
• Entrada: VDB-7822
• CPE: pronto
• CWE: CWE-20 (confirmado)
• CVSS: 5.0 (NVD)
• EPSS: 0.06671
• KEV: não
• Atividades: muito baixo
• Sector: Education, Finance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-1821
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1821
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-1821/