Nokogiri is vulnerable to XML External Entity (XXE) attack

ALTO 7.5CVE-2012-6685 · GHSA-6wj9-77wq-jq7p · Published 19/02/2020 · updated 16/06/2026

In breve

CVE-2012-6685 è una vulnerabilità ALTO (CVSS 7.5) che riguarda nokogiri, nokogiri (nokogiri), cloudforms management engine (redhat).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.3% delle vulnerabilità.
Correzione: aggiornare a 1.5.4 o successiva.

Package	Affected versions	Patched versions
nokogiri RubyGems	`< 1.5.4`	`1.5.4`
nokogiri nokogiri	`< 1.5.4`	`1.5.4`
cloudforms management engine redhat	`= 5.0`	No fix yet
openshift redhat	`= 2.0`	No fix yet
openstack redhat	`= 4.0= 6.0`	No fix yet
satellite redhat	`= 6.0`	No fix yet

Nokogiri before 1.5.4 is vulnerable to XXE attacks.

NVD description

Nokogiri before 1.5.4 is vulnerable to XXE attacks

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

RubyGems

< 1.5.4

1.5.4

< 1.5.4

1.5.4

= 5.0

No fix yet

= 2.0

No fix yet

= 4.0= 6.0

No fix yet

= 6.0

No fix yet

Altre vulnerabilità di nokogiri

Vedi tutto →