The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mongoUpgrade rubygem-bsonUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-pg-doc | May 4, 2022 | Apr 21, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Apr 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygemsUpgrade rubygem-did_you_meanUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubyUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade ruby-docUpgrade ruby-tcltkUpgrade rubygem-xmlrpcUpgrade rubygem-typeprofUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygems-develUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-net-telnetUpgrade rubygem-io-console | Sep 28, 2023 | Apr 21, 2021 |
| Amazon_linux | — | Upgrade ruby24 | May 20, 2021 | Apr 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2021 |
| Centos_linux | — | Upgrade rubygem-rdocUpgrade rubygem-psych-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-mysql2-docUpgrade ruby-debugsourceUpgrade rubygem-rakeUpgrade rubygem-abrt-docUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygems-develUpgrade rubygem-bson-docUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-pg-debuginfoUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrtUpgrade rubygem-net-telnetUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade ruby-libs-debuginfoUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-psychUpgrade rubygem-opensslUpgrade rubygem-mongoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade ruby-irbUpgrade ruby-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bundler-doc | Jun 30, 2021 | Apr 21, 2021 |
| Debian | — | Upgrade ruby2.7 | Feb 7, 2022 | Apr 21, 2021 |
| Freebsd | — | Upgrade rubyUpgrade gitlab-ceUpgrade rubygem-rexml | Nov 4, 2022 | Apr 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Jun 28, 2021 | Apr 21, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Aug 10, 2021 | Apr 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.7-11.4.35.0.1.94.2 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.9-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 21, 2021 |
| Oracle_linux | — | Upgrade rubygem-did_you_meanUpgrade rubygems-develUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-bson-docUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-mongoUpgrade rubygem-bundler-docUpgrade rubygem-abrtUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade rubygem-bundlerUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-net-telnetUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade rubygem-bsonUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-power_assert | Jul 2, 2021 | Apr 5, 2021 |
| Redhat_linux | — | Upgrade rubygem-mysql2-debuginfoUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade ruby-debuginfoUpgrade rubygem-net-telnetUpgrade ruby-libs-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade ruby-debugsourceUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-pgUpgrade rubygem-bson-debuginfoUpgrade rubygem-psychUpgrade rubygem-minitestUpgrade ruby-libsUpgrade rubygem-pg-debuginfoUpgrade ruby-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-irbUpgrade rubygem-mysql2Upgrade rubygem-io-consoleUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-did_you_meanUpgrade rubygem-openssl-debuginfoNo solution existsUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade rubygem-bsonUpgrade rubygem-rakeUpgrade rubygem-mongo | Jun 30, 2021 | Apr 21, 2021 |
| Rocky_linux | — | Upgrade ruby-libs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-opensslUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debuginfoUpgrade ruby-develUpgrade rubygem-json-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-pg-debuginfoUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade ruby-debuginfo | May 5, 2022 | Apr 21, 2021 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade ruby2.5Upgrade ruby2.5-devel | Apr 25, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade ruby2.7Upgrade libruby2.5Upgrade ruby2.3Upgrade libruby2.7Upgrade ruby2.5Upgrade libruby2.3 | Apr 21, 2021 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub