Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby Improper Restriction of XML External Entity Reference Vulnerability - CVE-2021-28965 - Vulnerability Database
Ruby

Ruby Improper Restriction of XML External Entity Reference Vulnerability - CVE-2021-28965

High
Reference: CVE-2021-28965
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-28965
Title: Ruby Improper Restriction of XML External Entity Reference Vulnerability
Overview:

The REXML gem before 3.2.5 in Ruby before 2.6.7 2.7.x before 2.7.3 and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.