VULNERABILITY INTELLIGENCE

CVE-2015-3227

CVSS score5 MEDIUM
EPSS probability4.26%
CISA KEVNot currently listed
Published2015-07-26
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth.

Primary references