CVE-2024-41123CWE-400
REXML DoS vulnerability
Medium · published August 1, 2024
What it is
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.
The record
Technical detail
- CVSS v3.1
- 5.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.01283 · 69.9th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2024-08-01T14:18Z
EPSS history
Timeline
01 AUG 14:18Z
REXML DoS vulnerability
cvelistv5