high7.5
CVE-2012-6685
Nokogiri before 1.5.4 is vulnerable to XXE attacks
Impact
Nokogiri before 1.5.4 is vulnerable to XXE attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokogiri | Nokogiri | before 1.5.4 |
| Redhat | Cloudforms Management Engine | Version 5.0 |
| Redhat | Openshift | Version 2.0 |
| Redhat | Openstack | Versions 4.0, 6.0 |
| Redhat | Openstack Foreman | All versions |
| Redhat | Satellite | Version 6.0 |
| Redhat | Subscription Asset Manager | All versions |
| Redhat | Enterprise Mrg | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=1178970
- https://github.com/sparklemotion/nokogiri/issues/693
- https://nokogiri.org/CHANGELOG.html#154-2012-06-12
- https://bugzilla.redhat.com/show_bug.cgi?id=1178970
- https://github.com/sparklemotion/nokogiri/issues/693
- https://nokogiri.org/CHANGELOG.html#154-2012-06-12