Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2015-3227
HistoryJul 26, 2015 - 10:59 p.m.

Design/Logic Flaw

2015-07-2622:59:00
PRIOn knowledge base
www.prio-n.com
6

7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

86.9%

JSON

The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth.

CPENameOperatorVersion
opensuseeq13.1
opensuseeq13.2
railseq4.1.2
railseq4.1.6
railseq4.2.0
railseq4.2.1
railseq4.1.1
railseq4.1.3
railseq4.1.4
railseq4.1.5
Rows per page:
1-10 of 131

Related

cve 1
openvas 7
osv 1
ubuntucve 1
nessus 6
debiancve 1
gitlab 1
github 1
fedora 2
debian 2
freebsd 1
cve
cve
CVE-2015-3227
2015-07-26 22:59:00
openvas
openvas
Ruby on Rails Active Support Denial of Service Vulnerability - Linux
2016-10-13 00:00:00
Ruby on Rails Active Support Denial of Service Vulnerability - Windows
2016-10-13 00:00:00
Fedora Update for rubygem-activesupport FEDORA-2015-10538
2015-07-07 00:00:00
osv
osv
activesupport vulnerable to Denial of Service via large XML document depth
2017-10-24 18:33:36
ubuntucve
ubuntucve
CVE-2015-3227
2015-07-26 00:00:00
nessus
nessus
openSUSE Security Update : rubygem-activesupport-3_2 (openSUSE-2015-506)
2015-07-27 00:00:00
Debian DLA-603-1 : ruby-activesupport-3.2 security update
2016-08-29 00:00:00
Fedora 21 : rubygem-activesupport-4.1.5-2.fc21 (2015-10545)
2015-07-01 00:00:00
debiancve
debiancve
CVE-2015-3227
2015-07-26 22:59:00
gitlab
gitlab
Possible Denial of Service
2015-07-26 00:00:00
github
github
activesupport vulnerable to Denial of Service via large XML document depth
2017-10-24 18:33:36
fedora
fedora
[SECURITY] Fedora 21 Update: rubygem-activesupport-4.1.5-2.fc21
2015-06-30 20:19:18
[SECURITY] Fedora 22 Update: rubygem-activesupport-4.2.0-2.fc22
2015-06-30 20:18:47
debian
debian
[SECURITY] [DLA 603-1] ruby-activesupport-3.2 security update
2016-08-27 16:25:23
[SECURITY] [DSA 3464-1] rails security update
2016-01-31 18:43:51
freebsd
freebsd
rubygem-rails -- multiple vulnerabilities
2015-06-16 00:00:00

7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

86.9%

JSON
Related for PRION:CVE-2015-3227
cve1openvas7osv1ubuntucve1nessus6debiancve1gitlab1github1fedora2debian2freebsd1