The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-mongoUpgrade rubygem-mysql2Upgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-abrt-docUpgrade rubygem-pgUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-pg-docUpgrade rubygem-mysql2-doc | May 4, 2022 | Apr 21, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Apr 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-did_you_meanUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade ruby-tcltkUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-rssUpgrade ruby-docUpgrade rubygemsUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-opensslUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-rakeUpgrade rubygem-net-telnetUpgrade rubygem-rexml | Sep 28, 2023 | Apr 21, 2021 |
| Amazon_linux | — | Upgrade ruby24 | May 20, 2021 | Apr 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2021 |
| Centos_linux | — | Upgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade ruby-debugsourceUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-rdocUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-abrt-docUpgrade rubygemsUpgrade rubygem-bson-docUpgrade rubygem-mongo-docUpgrade rubygem-test-unitUpgrade rubygem-irbUpgrade rubygem-net-telnetUpgrade rubygem-openssl-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-bson-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-psychUpgrade rubygem-pgUpgrade ruby-develUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-bsonUpgrade rubygem-mongoUpgrade ruby-irbUpgrade ruby-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrtUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-mysql2-debugsource | Jun 30, 2021 | Apr 21, 2021 |
| Debian | — | Upgrade ruby2.7 | Feb 7, 2022 | Apr 21, 2021 |
| Freebsd | — | Upgrade gitlab-ceUpgrade rubyUpgrade rubygem-rexml | Nov 4, 2022 | Apr 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jun 28, 2021 | Apr 21, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Aug 10, 2021 | Apr 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.9-11.4.35.0.1.94.2 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 21, 2021 |
| Oracle_linux | — | Upgrade rubygem-did_you_meanUpgrade rubygems-develUpgrade rubygem-bson-docUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygemsUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygem-mongoUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-bsonUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade ruby-docUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade rubygem-net-telnetUpgrade rubygem-irb | Jul 2, 2021 | Apr 5, 2021 |
| Redhat_linux | — | Upgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-mongoUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-pg-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-pg-debuginfoUpgrade rubygem-irbNo solution existsUpgrade ruby-libsUpgrade rubygem-bson-debugsourceUpgrade ruby-docUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pgUpgrade rubygem-abrtUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygemsUpgrade rubygem-test-unitUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-opensslUpgrade ruby-libs-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-net-telnetUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-bundler-docUpgrade rubygem-bigdecimal | Jun 30, 2021 | Apr 21, 2021 |
| Rocky_linux | — | Upgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubyUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade rubygem-pgUpgrade rubygem-openssl | May 5, 2022 | Apr 21, 2021 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extra | Apr 25, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade libruby2.3Upgrade ruby2.5Upgrade libruby2.7Upgrade ruby2.3Upgrade libruby2.5Upgrade ruby2.7 | Apr 21, 2021 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub