CVE-2013-1856

score

<0.1

cvss

5.8

epss

2.1%

published

2013-03-19

kev added

—

first seen

2026-10-21

Ruby on Rails 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13, contain an XML External Entity (XXE) vulnerability in ActiveSupport's XmlMini_JDOM backend when JRuby is used, allowing remote attackers to read arbitrary files or cause denial of service via external DTD or entity declarations, exploit requires JRuby environment.