[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxe-WlYOpwMpQAo9NqcYP9Q26jW_NxaoXP97LwTrPLWA":3,"g5a-risk:CVE-2021-28965":134},{"success":4,"data":5,"meta":132},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":56,"weaknesses":72,"weaknessesCount":76,"isActivelyExploited":77,"cisaInfo":26,"otxData":26,"relatedBlogPosts":78,"seoMetadata":79,"configurations":104,"relatedVendorCves":130,"notableEvents":131},"CVE-2021-28965","What is CVE-2021-28965?","The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.","The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect docum...","2021-04-21T07:15:07.677","2023-11-07T03:32:25.16",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.05061,[39,39,39,39,39,39,39],"High",[43,48,51],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"ruby-lang","rexml","*","cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*",{"vendor":44,"product":49,"version":46,"criteria":50,"vulnerable":4},"ruby","cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"fedoraproject","fedora","34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",3,[58,62,67],{"url":59,"source":60,"tags":61},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FWTVFTLFVCSUE5CXHINJEUCKSHU4SWDMT\u002F","Fedoraproject",[],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210528-0003\u002F","Netapp",[66],"Third Party Advisory",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fnews\u002F2021\u002F04\u002F05\u002Fxml-round-trip-vulnerability-in-rexml-cve-2021-28965\u002F","Ruby-lang",[71],"Vendor Advisory",[73],{"id":74,"name":74,"description":75},"Unknown","NVD-CWE-Other",1,false,[],{"title":80,"metaDescription":81,"keywords":82,"canonicalUrl":83,"structuredData":84},"What is CVE-2021-28965? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-28965, a high severity cyber security vulnerability from 2021. The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x befo...","CVE-2021-28965, CVE-2021-28965 vulnerability, CVE-2021-28965 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, ruby-lang security, fedoraproject security, rexml vulnerability, ruby vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2021-28965",{"@context":85,"@type":86,"headline":80,"description":81,"datePublished":10,"dateModified":11,"author":87,"publisher":91,"about":95,"mainEntityOfPage":99,"articleSection":102,"keywords":103},"https:\u002F\u002Fschema.org","TechArticle",{"@type":88,"name":89,"url":90},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":88,"name":89,"url":90,"logo":92},{"@type":93,"url":94},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":96,"name":6,"description":97,"additionalType":98},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":100,"@id":101},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-28965","Cybersecurity","CVE-2021-28965, CVE-2021-28965 vulnerability, CVE-2021-28965 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[105,124],{"Operator":26,"Negate":26,"Nodes":106},[107],{"Operator":108,"Negate":26,"CPEMatch":109},"OR",[110,113,116,120],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":112,"VersionEndIncluding":26},"F9707003-AB06-4BEB-AA2B-3D90BCDD5ED4","3.2.5",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":115,"VersionEndIncluding":26},"1319FB03-146B-4D3E-AF94-6E6297022DAF","2.6.7",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":118,"VersionEndExcluding":119,"VersionEndIncluding":26},"71E99C67-E4BC-46AC-9D2C-55454E6ACAB0","2.7.0","2.7.3",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":26},"D2EA779B-7F5D-4E60-95BB-2D565591F673","3.0.0","3.0.1",{"Operator":26,"Negate":26,"Nodes":125},[126],{"Operator":108,"Negate":26,"CPEMatch":127},[128],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A930E247-0B43-43CB-98FF-6CE7B8189835",[],[],{"lastModified":11,"cacheTime":133,"version":32},1792259367109,{"score":135,"band":136,"action":137,"scoredAt":138},48,"Medium","Plan remediation","2026-10-16T06:50:54.420977+00:00"]