CVE-2012-6685 (nokogiri): CVE-2012-6685 rubygem-nokogiri: XML eXternal Entity (XXE) flaw

June 8th, 2012

ADVISORIES

CVE-2012-6685 (NVD)
OSVDB-90946

GEM

SEVERITY

CVSS v2.0: 5.0 (Medium)

PATCHED VERSIONS

>= 1.5.4

DESCRIPTION

Nokogiri before 1.5.4 is vulnerable to XXE attacks