The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade rubygem-bsonUpgrade rubygem-bson-doc | May 4, 2022 | Apr 21, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Apr 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rexmlUpgrade rubygems-develUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade ruby-debuginfoUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade rubygem-test-unitUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-bundlerUpgrade ruby-tcltkUpgrade ruby-docUpgrade rubygem-minitestUpgrade rubygem-rssUpgrade ruby-irbUpgrade ruby-develUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubygem-did_you_mean | Sep 28, 2023 | Apr 21, 2021 |
| Amazon_linux | — | Upgrade ruby24 | May 20, 2021 | Apr 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2021 |
| Centos_linux | — | Upgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-mongoUpgrade rubygem-irbUpgrade rubygem-pgUpgrade rubygem-bsonUpgrade rubygem-pg-debugsourceUpgrade rubygem-opensslUpgrade ruby-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-bundler-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-irbUpgrade ruby-libsUpgrade rubygem-abrtUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygemsUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-psych-debuginfoUpgrade rubygems-develUpgrade rubyUpgrade ruby-libs-debuginfoUpgrade rubygem-rakeUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-abrt-docUpgrade ruby-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-bson-docUpgrade ruby-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-psych | Jun 30, 2021 | Apr 21, 2021 |
| Debian | — | Upgrade ruby2.7 | Feb 7, 2022 | Apr 21, 2021 |
| Freebsd | — | Upgrade rubyUpgrade gitlab-ceUpgrade rubygem-rexml | Nov 4, 2022 | Apr 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jun 28, 2021 | Apr 21, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Aug 10, 2021 | Apr 21, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.9-11.4.35.0.1.94.2 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 21, 2021 |
| Oracle_linux | — | Upgrade rubygem-minitestUpgrade rubygem-bsonUpgrade rubygem-irbUpgrade rubygem-net-telnetUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade rubygem-bundlerUpgrade rubyUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade ruby-docUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubygem-mongoUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade rubygem-rakeUpgrade rubygem-did_you_meanUpgrade rubygem-bson-docUpgrade rubygem-psychUpgrade rubygem-mongo-docUpgrade rubygem-io-consoleUpgrade rubygem-abrt-docUpgrade rubygem-xmlrpcUpgrade ruby-libsUpgrade ruby-irbUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-bigdecimal | Jul 2, 2021 | Apr 5, 2021 |
| Redhat_linux | — | Upgrade rubygem-bsonUpgrade rubygem-pgUpgrade ruby-libsUpgrade ruby-debugsourceUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade ruby-docUpgrade rubygem-power_assertUpgrade rubygem-bundlerNo solution existsUpgrade rubygem-bson-debuginfoUpgrade rubygem-irbUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debugsourceUpgrade ruby-default-gemsUpgrade rubygem-rakeUpgrade rubygem-minitestUpgrade rubygem-mongoUpgrade rubygem-jsonUpgrade rubygem-mysql2-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubygem-opensslUpgrade rubygem-json-debuginfoUpgrade rubygem-rdocUpgrade rubygem-io-console-debuginfoUpgrade ruby-develUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade ruby-libs-debuginfoUpgrade rubygem-xmlrpcUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-did_you_meanUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-io-console | Jun 30, 2021 | Apr 21, 2021 |
| Rocky_linux | — | Upgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-opensslUpgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-jsonUpgrade ruby-debugsourceUpgrade ruby-develUpgrade rubygem-json-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2-debuginfo | May 5, 2022 | Apr 21, 2021 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5-doc-riUpgrade ruby2.5-doc | Apr 25, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade ruby2.3Upgrade libruby2.3Upgrade ruby2.5Upgrade libruby2.7Upgrade ruby2.7Upgrade libruby2.5 | Apr 21, 2021 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub