Vulnerability record · CVE-2024-49761 · published 28 October 2024

CVE-2024-49761: Ruby-lang rexml inefficient regular expression (redos) vulnerability

Ruby Lang · Rexml

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or later include the patch to fix the vulnerability.

6.6 CVSS 4.0 Medium EPSS 1.4% · top 28.2% CWE-1333 · Inefficient regular expression (ReDoS)

6.6CVSS 4.0 base score

1.4%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

5References

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

NOntap Tools Netapp

Rexml Ruby Lang

References

Link	Tags
https://github.com/ruby/rexml/commit/ce59f2eb1aeb371fe1643414f06618dbe031979f	Patch
https://github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6m	Third Party Advisory
https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761	Vendor Advisory
https://lists.debian.org/debian-lts-announce/2025/01/msg00011.html
https://security.netapp.com/advisory/ntap-20241227-0004/	Third Party Advisory

Track CVE-2024-49761 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2021-44228Apache Log4j2 JNDI lookup remote code executionApache Log4j2 versions 2.0-beta9 through 2.15.0 (excluding 2.12.2, 2.12.3, and 2.3.1) do not protect against attacker-controlled LDAP and other JNDI …KEVEPSS 100%analysed10 Dec 2021 7.8CVE-2021-3156Sudo off-by-one heap overflow allows root privilege escalationSudo before 1.9.5p2 contains an off-by-one error leading to a heap-based buffer overflow. Triggering it via 'sudoedit -s' with a command-line argumen…KEVEPSS 100%analysed26 Jan 2021 9.8CVE-2024-52533Gnome glib classic buffer overflow vulnerabilitygio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient f…EPSS 1.3%11 Nov 2024 9.8CVE-2024-1351Mongodb improper certificate validation vulnerabilityUnder certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connect…EPSS 0.50%7 Mar 2024 9.3CVE-2024-28752Apache cxf server-side request forgery (ssrf) vulnerabilityA SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style att…EPSS 2.5%15 Mar 2024 8.7CVE-2024-7254Google protobuf uncontrolled resource consumption vulnerabilityAny project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exce…EPSS 2.8%19 Sep 2024 8.1CVE-2024-6387OpenSSH sshd signal handler race condition allows unauthenticated remote code executionA security regression of CVE-2006-5051 in OpenSSH's sshd creates a race condition where signals are handled unsafely. An unauthenticated remote attac…EPSS 100%analysed1 Jul 2024 7.8CVE-2023-52433Netapp ontap tools vulnerabilityIn the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New …EPSS 0.25%20 Feb 2024

Source: NIST National Vulnerability Database (record CVE-2024-49761), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.