← Back

CVE-2012-6685

nvd nist
Published: Feb 19, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Nokogiri before 1.5.4 is vulnerable to XXE attacks

Affected (9)

Nokogiri
1 product
Nokogiri
Redhat
7 products
Cloudforms Management Engine
Enterprise Mrg
Openshift
Openstack
Openstack Foreman
Satellite
Subscription Asset Manager
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Nokogiri
Before 1.5.4
Configuration B
8 vulnerable
Vulnerable SoftwareAffected Versions
Cloudforms Management Engine
Version 5.0
Enterprise Mrg
Version 2.0
Openshift
Version 2.0
Redhat
Openstack
Version 4.0
Openstack
Version 6.0
Openstack Foreman
All versions
Satellite
Version 6.0
Subscription Asset Manager
All versions

Related CWEs

CWE-776
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.

References (6)

Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
ExploitIssue TrackingThird Party Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.