nori contains Improper Input Validation

🗓️ 24 Oct 2017 18:33:37Reported by GitHub Advisory DatabaseType

nori gem input validation vulnerability 2.0.x-1.0.x for Ruby allows remote attackers to conduct object-injection attacks and execute arbitrary code or cause a denial of service via nested XML entity reference

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2013-0285	9 Apr 201320:00	–	cve
Cvelist	CVE-2013-0285	9 Apr 201320:00	–	cvelist
EUVD	EUVD-2017-0160	7 Oct 202500:30	–	euvd
NVD	CVE-2013-0285	9 Apr 201320:55	–	nvd
OSV	GHSA-4936-RJ25-6WM6 nori contains Improper Input Validation	24 Oct 201718:33	–	osv
OSV	UBUNTU-CVE-2013-0285	9 Apr 201320:55	–	osv
Prion	Design/Logic Flaw	9 Apr 201320:55	–	prion
RedhatCVE	CVE-2013-0285	22 May 202504:44	–	redhatcve
RubySec	Ruby Gem nori Parameter Parsing Remote Code Execution	10 Jan 201300:00	–	rubygems
UbuntuCve	CVE-2013-0285	9 Apr 201320:55	–	ubuntucve

Vulners

Node

nori_gem_project nori_gemRange1.0.0–1.0.3rubygems

nori_gem_project nori_gemRange1.1.0–1.1.4rubygems

nori_gem_project nori_gemRange2.0.0–2.0.2rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-0285
github	www.github.com/advisories/GHSA-4936-rj25-6wm6
seclists	www.seclists.org/oss-sec/2013/q1/304
github	www.github.com/savonrb/nori/commit/2ca6f8603e406f884a8fcea6bc26f8f6bf168f40
github	www.github.com/savonrb/nori/commit/4bcf59abdcec6bcd1153241b122eda61a494e4fb
github	www.github.com/savonrb/nori/commit/818f5263b1d597b603d46cbe1702cd2717259e32
github	www.github.com/savonrb/nori/commit/c3fdce7a2d2670b44f1cda35da0ae73cc1372084
github	www.github.com/savonrb/nori/commit/c5e07f5c32e615f0a4a7ee2782d37f7a33261be4
github	www.github.com/savonrb/nori/commit/d9b68667249b98776fb23ba9e9c548dc4b524709
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/nori/CVE-2013-0285.yml

25 Aug 2023 21:35Current

5.4Medium risk

Vulners AI Score5.4

CVSS 27.5

EPSS0.015

CWE-20