Description

The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document, aka an XML Entity Expansion (XEE) attack.

Remediation

References

CVE-2014-8080

Related Vulnerabilities

MySQL CVE-2022-39408 Vulnerability (CVE-2022-39408)

Joomla! Core 3.0.x Information Disclosure (3.0.0 - 3.0.2)

MySQL CVE-2019-2789 Vulnerability (CVE-2019-2789)

WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Disclosure (1.0.4)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-16781)

Severity

Medium

Classification

CVE-2014-8080

Tags

Missing Update Known Vulnerabilities