CVE:CVE-2012-6685
CNNVD:CNNVD-201508-328
Nokogiri是一款用于解析Ruby中HTML和XML的开源软件库。
Nokogiri 1.5.4之前版本中存在XML外部实体漏洞。远程攻击者可利用该漏洞在特制的XML中指定URL，并在解析后打开该URL连接。
solution:Upgrade nokogiri nokogiri to a higher version than 1.5.4,and avoid the version (,1.5.4); Upgrade redhat cloudforms_management_engine to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat openshift to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat openstack to a higher version than 4.0,6.0,and avoid the version 4.0,6.0; Upgrade redhat openstack_foreman to a higher version than -; Upgrade redhat satellite to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat subscription_asset_manager to a higher version than -; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0