| Package | Affected versions | Patched versions |
|---|---|---|
| nokogiri | < 1.10.3 | 1.10.3 |
| e-series santricity os controller | ≥ 11.0, ≤ 11.70.2 | |
| jdk | = 8.0 | |
| libxslt | ≤ 1.1.33 |
A dependency of Nokogiri, libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free