← Back

CVE-2024-41123

nvd nist
Published: Aug 1, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.

Affected (2)

Products: Ruby Lang: Rexml
Ruby Lang
1 product
Rexml
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Ruby Lang
Rexml
Before 3.2.7
Rexml
From 3.2.8 to 3.3.2

Related CWEs

CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (6)

Source: security-advisories@github.com
Not Applicable
Source: security-advisories@github.com
Vendor Advisory
Source: security-advisories@github.com
Not Applicable
Source: security-advisories@github.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.