ruby4.0-rubygem-multi_xml-0.6.0-1.31 on GA media (moderate)

ruby4.0-rubygem-multixml-0.6.0-1.31 on GA media Announcement ID: openSUSE-SU-2026:10355-1 Rating: moderate Cross-References: CVE-2013-0175 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2026:10355-1 ruby4.0-rubygem-multi_xml-0.6.0-1.31 on GA media

These are all security issues fixed in the ruby4.0-rubygem-multixml-0.6.0-1.31 package on the GA media of openSUSE Tumbleweed...

PT-2013-2146

Name of the Vulnerable Software and Affected Versions multi xml gem version 0.5.2 Grape versions prior to 0.2.6 Description The issue allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service involving nested XML entity references. This c...

Fedora 18 : rubygem-multi_xml-0.4.1-5.fc18 (2013-0808)

Fix for CVE-2013-0175. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

multi_xml Gem for Ruby XML Parameter Parsing Remote Command Execution

The multixml Gem for Ruby contains a flaw that is triggered when an error occurs during the parsing of the 'XML' parameter. With a crafted request containing arbitrary symbol and yaml types, a remote attacker can execute arbitrary commands...