Known vulnerabilities in rh-ruby25-ruby (Red Hat package)

Known vulnerabilities in rh-ruby25-ruby (Red Hat package)

Vendor: Red Hat Inc.

Software: rh-ruby25-ruby (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:rh-ruby25-ruby_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 14

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-28965	CWE-611	Medium	No	No	2.5.9-9.el7	08.04.2021	SB2021040816 SB2021041365 SB2021042119 and 24 more
#VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-25613	CWE-444	Medium	Available	No	2.5.9-9.el7	05.10.2020	SB2020100509 SB2020100703 SB2020111806 and 21 more
#VU31886 - Exposure of sensitive information to an unauthorized actor CVE-2020-10933	CWE-200	Low	No	No	2.5.9-9.el7	26.07.2020	SB2020050439 SB2020050208 SB2020040188 and 11 more
#VU32971 - Improper input validation CVE-2020-10663	CWE-20	Medium	No	No	2.5.9-9.el7	28.04.2020	SB2020042868 SB2020050208 SB2020081273 and 24 more
#VU23009 - Improper Control of Generation of Code ('Code Injection') CVE-2019-16255	CWE-94	High	No	No	2.5.9-9.el7	27.11.2019	SB2019100211 SB2019112701 SB2019121714 and 14 more
#VU23008 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2019-16254	CWE-113	Medium	No	No	2.5.9-9.el7	27.11.2019	SB2019100211 SB2019112701 SB2019121714 and 14 more
#VU23007 - Improper input validation CVE-2019-16201	CWE-20	Medium	No	No	2.5.9-9.el7	27.11.2019	SB2019100211 SB2019112701 SB2019121714 and 14 more
#VU23006 - Improper input validation CVE-2019-15845	CWE-20	Medium	No	No	2.5.9-9.el7	26.11.2019	SB2019100211 SB2019112701 SB2019121714 and 15 more
#VU20194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8321	CWE-79	Low	No	No	2.5.5-7.el7	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 9 more
#VU20193 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-8320	CWE-22	Low	No	No	2.5.5-7.el7	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 8 more
#VU20192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8323	CWE-79	Low	No	No	2.5.5-7.el7	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 10 more
#VU20191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8322	CWE-79	Low	No	No	2.5.5-7.el7	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 10 more
#VU20190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8325	CWE-79	Low	No	No	2.5.5-7.el7	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 10 more
#VU20189 - Improper Control of Generation of Code ('Code Injection') CVE-2019-8324	CWE-94	Medium	No	No	2.5.5-7.el7	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 11 more