Lucene search

K
rubygemsRubySecRUBY:RUBY-2013-1821-90587
HistoryFeb 21, 2013 - 8:00 p.m.

CVE-2013-1821 ruby: entity expansion DoS vulnerability in REXML

2013-02-2120:00:00
RubySec
rubysec.com
10

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392
allows remote attackers to cause a denial of service (memory
consumption and crash) via crafted text nodes in an XML document,
aka an XML Entity Expansion (XEE) attack.

CPENameOperatorVersion
rubyle1.9.3.391
rubyge1.9.4.0
rubylt2.0.0.0