Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

XML Injection

🗓️ 17 Apr 2021 02:47:08Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

Ruby XML injection vulnerability in REXML ge

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2021-28965
21 Apr 202107:15
–attackerkb
Tenable Nessus		Amazon Linux 2 : ruby (ALAS-2024-2637)
18 Sep 202400:00
–nessus
Tenable Nessus		Amazon Linux 2 : ruby (ALASRUBY2.6-2023-006)
27 Sep 202300:00
–nessus
Tenable Nessus		Amazon Linux 2 : ruby (ALASRUBY3.0-2023-007)
27 Sep 202300:00
–nessus
Tenable Nessus		Amazon Linux AMI : ruby24 (ALAS-2021-1501)
20 May 202100:00
–nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0044: ruby:2.7 (ALINUX3-SA-2021:0044)
14 May 202500:00
–nessus
Tenable Nessus		AlmaLinux 8 : ruby:2.7 (ALSA-2021:2584)
7 Aug 202300:00
–nessus
Tenable Nessus		AlmaLinux 8 : ruby:2.6 (ALSA-2021:2588)
7 Aug 202300:00
–nessus
Tenable Nessus		CentOS 8 : ruby:2.7 (CESA-2021:2584)
29 Jun 202100:00
–nessus
Tenable Nessus		CentOS 8 : ruby:2.5 (CESA-2021:2587)
29 Jun 202100:00
–nessus
Rows per page
Vulners
Node
OR
AND
rubyrubyMatch2.6.6-r2os
rubyrubyMatch2.6.6-r3os
alpinelinuxalpine_linuxMatch3.11
AND
rubyrubyMatch2.5.8-r1os
rubyrubyMatch2.5.8-r0os
rubyrubyMatch2.5.7-r0os
alpinelinuxalpine_linuxMatch3.10
AND
rubyrubyMatch2.7.1-r3os
rubyrubyMatch2.7.2-r1os
rubyrubyMatch2.7.2-r0os
alpinelinuxalpine_linuxMatch3.12
AND
rubyrubyMatch2.7.2-r3os
rubyrubyMatch2.7.2-r4os
alpinelinuxalpine_linuxMatch3.13
AND
ruby2.7ruby2.7Match2.7.2-3debian
debiandebian_linuxMatch999
AND
ruby2.7ruby2.7Match2.7.2-3debian
debiandebian_linuxMatch11
AND
rubyrubyMatch2.7.2-r3os
rubyrubyMatch2.6.5-r2os
rubyrubyMatch2.6.6-r2os
rubyrubyMatch2.6.6-r4os
rubyrubyMatch2.7.1-r3os
rubyrubyMatch2.7.2-r4os
alpinelinuxalpine_linuxMatchedge
AND
focalfocalMatch2.7.0-5ubuntu1.2debian
focalfocalMatch2.7.0-5ubuntu1.1debian
focalfocalMatch2.7.0-5ubuntu1debian
debiandebian_linux
AND
hirsutehirsuteMatch2.7.2-3debian
debiandebian_linux
AND
googlebionicMatch2.5.1-1ubuntu1.7debian
googlebionicMatch2.5.1-1ubuntu1.6debian
googlebionicMatch2.5.1-1ubuntu1debian
debiandebian_linux
AND
xenialxenialMatch2.3.1-2~ubuntu16.04.14debian
xenialxenialMatch2.3.0-5ubuntu1debian
debiandebian_linux
AND
apachegroovyMatch2.7.1-3ubuntu1.1debian
apachegroovyMatch2.7.1-3build1debian
apachegroovyMatch2.7.1-3ubuntu1debian
debiandebian_linux
AND
develdevelMatch2.7.1-3build1debian
develdevelMatch2.7.2-4debian
develdevelMatch2.7.1-3debian
develdevelMatch2.7.2-3debian
debiandebian_linux
AND
ruby2.5ruby2.5Match2.5.5-3+deb10u2debian
ruby2.5ruby2.5Match2.5.5-3+deb10u3debian
debiandebian_linuxMatch10
OR
rh-ruby25-rubyrh-ruby25-rubyMatch2.5.5_7.el7
rh-ruby25-rubyrh-ruby25-rubyMatch2.5.3_6.el7
rh-ruby25-rubyrh-ruby25-rubyMatch2.5.0_5.el7
rh-ruby26-rubyrh-ruby26-rubyMatch2.6.2_118.el7
rubyrubyMatch2.4.9_93.el7cf
rubyrubyMatch2.0.0.648_34.el7_6
rubyrubyMatch1.8.7.352_3.el6
rubyrubyMatch1.8.7.299_7.el6_1.1
rubyrubyMatch2.0.0.598_25.ael7b_1
rubyrubyMatch1.8.7.374_4.el6_6
rubyrubyMatch1.8.7.374_3.el6_6
rubyrubyMatch1.8.7.352_7.el6_2
rubyrubyMatch1.8.7.299_4.el6
rubyrubyMatch1.8.7.352_4.el6_2
rubyrubyMatch2.4.5_90.el7cf
rubyrubyMatch2.0.0.648_36.el7
rubyrubyMatch1.8.7.352_10.el6_4
rubyrubyMatch1.8.7.352_12.el6_4
rubyrubyMatch1.8.7.352_13.el6
rubyrubyMatch1.8.7.374_2.el6
rubyrubyMatch2.0.0.648_35.el7_6
rubyrubyMatch2.4.6_91.el7cf
rubyrubyMatch1.8.7.299_5.el6_0.1
rubyrubyMatch1.8.7.352_6.el6
rubyrubyMatch1.8.7.299_7.el6
rubyrubyMatch1.8.7.374_5.el6
rubyrubyMatch2.0.0.648_39.el7_9

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Nov 2023 23:17Current
7.7High risk
Vulners AI Score7.7
CVSS 25
CVSS 3.17.5
EPSS0.05061
rubyxmlinjectionrexmlvulnerability
33