CVE-2012-6685

Nokogiri before 1.5.4 is vulnerable to XXE attacks

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-02-19

Last modified

2024-08-06

Weaknesses

CWE-776

Affected products

• Nokogiri (Nokogiri)
• Cloudforms Management Engine (Redhat)
• Enterprise Mrg (Redhat)
• Openshift (Redhat)
• Openstack (Redhat)
• Openstack Foreman (Redhat)
• Satellite (Redhat)
• Subscription Asset Manager (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1178970
• https://github.com/sparklemotion/nokogiri/issues/693
• https://nokogiri.org/CHANGELOG.html#154-2012-06-12