Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2015-3227 — MEDIUM severity vulnerability | Release Alert

CVE-2015-3227

MEDIUMCVSS v2

Published

July 26, 2015

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth.

rails

RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.

= 4.1.2, = 4.1.6, = 4.2.0, = 4.2.1, = 4.1.1, = 4.1.3, = 4.1.4, = 4.1.5, = 4.1.7, = 4.1.8, = 4.1.0NVD

rails/rails

GitHubRuby on Rails

= 4.1.2, = 4.1.6, = 4.2.0, = 4.2.1, = 4.1.1, = 4.1.3, = 4.1.4, = 4.1.5, = 4.1.7, = 4.1.8, = 4.1.0NVD

rails

More on this CVE

NVD↗GitHub Advisory↗

NPMRails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Controller (MVC) pattern.

= 4.1.2, = 4.1.6, = 4.2.0, = 4.2.1, = 4.1.1, = 4.1.3, = 4.1.4, = 4.1.5, = 4.1.7, = 4.1.8, = 4.1.0NVD

rails

Docker HubDEPRECATED; use "ruby" instead

= 4.1.2, = 4.1.6, = 4.2.0, = 4.2.1, = 4.1.1, = 4.1.3, = 4.1.4, = 4.1.5, = 4.1.7, = 4.1.8, = 4.1.0NVD