The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
References
Configurations
History
07 Nov 2023, 03:32
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
08 Aug 2023, 14:22
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-Other |
02 Jun 2021, 18:37
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://security.netapp.com/advisory/ntap-20210528-0003/ - Third Party Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTVFTLFVCSUE5CXHINJEUCKSHU4SWDMT/ - Mailing List, Third Party Advisory |
28 May 2021, 10:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
29 Apr 2021, 16:47
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/ - Vendor Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTVFTLFVCSUE5CXHINJEUCKSHU4SWDMT/ - Third Party Advisory | |
CWE | CWE-611 | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
CPE | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:* cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:* |
24 Apr 2021, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
21 Apr 2021, 12:07
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-04-21 07:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-28965
Mitre link : CVE-2021-28965
CVE.ORG link : CVE-2021-28965
JSON object : View
Products Affected
ruby-lang
- ruby
- rexml
fedoraproject
- fedora
CWE