FLAT-1N3YN – Vulnerability | Fluid Attacks Database

Database

Description

incorrect calculation

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.22	ruby	>=2.7.0 <2.7.3-r0	2.7.3-r0
rubygems	rexml	>=0 <3.2.5	3.2.5
alpine v3.10	ruby	>=2.7.0 <2.5.9-r0	2.5.9-r0
alpine v3.11	ruby	>=2.7.0 <2.6.7-r0	2.6.7-r0
alpine v3.12	ruby	>=2.7.0 <2.7.3-r0	2.7.3-r0
alpine v3.13	ruby	>=2.7.0 <2.7.3-r0	2.7.3-r0
alpine v3.15	ruby	>=2.7.0 <2.7.3-r0	2.7.3-r0
alpine v3.16	ruby	>=2.7.0 <2.7.3-r0	2.7.3-r0
alpine v3.17	ruby	>=2.7.0 <2.7.3-r0	2.7.3-r0
alpine v3.18	ruby	>=2.7.0 <2.7.3-r0	2.7.3-r0

1-10 of 25

10

Aliases

1. CVE-2021-289652. NVD-2021-289653. OSV-ALPINE-2021-289654. OSV-2021-289655. OSV-DEBIAN-2021-289656. GCVE-2021-289657. SECURITY-CVE-2021-289658. SECURITY-TRACKER-CVE-2021-289659. security.netapp.com10. ruby-lang.org

References

1. https://github.com/ruby/rexml/commit/2fe62e29094d95921d7e19abbd2e26b23d78dc5b2. https://github.com/ruby/rexml/commit/3c137eb119550874b2b3e27d12b733ca670333773. https://github.com/ruby/rexml/commit/6a250d2cd1194c2be72becbdd9c3e770aa16e7524. https://github.com/ruby/rexml/commit/9b311e59ae05749e082eb6bbefa1cb620d1a786e5. https://github.com/ruby/rexml/commit/a659c63e37414506dfb0d4655e031bb7a2e73fc86. https://github.com/ruby/rexml/commit/f7bab8937513b1403cea5aff874cbf32fd5e85517. https://github.com/ruby/rexml/commit/f9d88e4948b4a43294c25dc0edb16815bd9d86188. https://hackerone.com/reports/11040779. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rexml/CVE-2021-28965.yml10. https://lists.fedoraproject.org/archives/list/[email protected]/message/WTVFTLFVCSUE5CXHINJEUCKSHU4SWDMT11. https://rubygems.org/gems/rexml12. https://security.netapp.com/advisory/ntap-20210528-000313. https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-2896514. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVFTLFVCSUE5CXHINJEUCKSHU4SWDMT/

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.