The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade rubygem-abrt-docUpgrade rubygem-mysql2 | May 4, 2022 | Apr 21, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Apr 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-xmlrpcUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygem-rbsUpgrade rubygemsUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade rubygem-did_you_meanUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubyUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-minitestUpgrade ruby-docUpgrade ruby-tcltkUpgrade rubygem-rss | Sep 28, 2023 | Apr 21, 2021 |
| Amazon_linux | — | Upgrade ruby24 | May 20, 2021 | Apr 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2021 |
| Centos_linux | — | Upgrade rubygem-mysql2-debugsourceUpgrade rubygem-test-unitUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-debuginfoUpgrade rubygem-rakeUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade rubygem-rdocUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-did_you_meanUpgrade rubyUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-bsonUpgrade rubygem-minitestUpgrade ruby-irbUpgrade ruby-develUpgrade rubygem-mongoUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade ruby-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-irbUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgUpgrade rubygem-net-telnetUpgrade rubygem-bson-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade rubygem-xmlrpc | Jun 30, 2021 | Apr 21, 2021 |
| Debian | — | Upgrade ruby2.7 | Feb 7, 2022 | Apr 21, 2021 |
| Freebsd | — | Upgrade gitlab-ceUpgrade rubyUpgrade rubygem-rexml | Nov 4, 2022 | Apr 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jun 28, 2021 | Apr 21, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Aug 10, 2021 | Apr 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.7-11.4.35.0.1.94.2 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.9-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 21, 2021 |
| Oracle_linux | — | Upgrade rubygem-did_you_meanUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-mongo-docUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-bson-docUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade rubygem-bsonUpgrade rubygem-rdocUpgrade rubygem-mysql2Upgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade ruby-docUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-mysql2-docUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade rubyUpgrade ruby-develUpgrade rubygem-mongoUpgrade rubygem-irb | Jul 2, 2021 | Apr 5, 2021 |
| Redhat_linux | — | Upgrade ruby-default-gemsUpgrade ruby-libsUpgrade rubygem-abrt-docUpgrade rubygem-did_you_meanUpgrade rubygem-psychUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-pgUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade rubygem-minitestUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-pg-debugsourceUpgrade rubygem-irbNo solution existsUpgrade rubygem-mongoUpgrade ruby-docUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-bsonUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygem-opensslUpgrade rubygem-mysql2-docUpgrade rubygem-json-debuginfoUpgrade rubygem-test-unitUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade rubygemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-rdocUpgrade rubygem-xmlrpcUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bundler-docUpgrade ruby-irbUpgrade ruby-debuginfoUpgrade ruby-devel | Jun 30, 2021 | Apr 21, 2021 |
| Rocky_linux | — | Upgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debugsourceUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade ruby-debugsourceUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-pg-debugsourceUpgrade ruby-libsUpgrade rubygem-psych-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-opensslUpgrade rubygem-pg | May 5, 2022 | Apr 21, 2021 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc | Apr 25, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade ruby2.7Upgrade libruby2.5Upgrade ruby2.5Upgrade libruby2.7Upgrade libruby2.3Upgrade ruby2.3 | Apr 21, 2021 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub