Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5152
HistorySep 21, 2017 - 8:34 a.m.

Remote Code Execution (RCE)

2017-09-2108:34:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

The nokogiri gem is susceptible to Remote Code Execution (RCE). These vulnerabilities are possible because the gem contains a version of the libxml2 C package which is affected by CVE-2017-7375 and CVE-2017-7376 respectively. These vulnerabilities allow a malicious user to pass a XML file to execute arbitrary code.