CVE-2013-1812

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an…

published December 12, 2013

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02132 · 81.8th percentile
Published
2013-12-12T18:00Z
EPSS history
Timeline
  • 12 DEC 18:00Z
    The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an…
    cvelistv5