CVE-2025-10990

A flaw was found in REXML. A remote attacker could exploit inefficient regular expression (regex) parsing when processing hex numeric character references (&#x...;) in XML documents. This could lead to a Regular Expression Denial of Service (ReDoS), impacting the availability of the affected component. This issue is the result of an incomplete fix for CVE-2024-49761.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2025:17606
https://access.redhat.com/errata/RHSA-2025:17613
https://access.redhat.com/errata/RHSA-2025:17693
https://access.redhat.com/security/cve/CVE-2025-10990
https://bugzilla.redhat.com/show_bug.cgi?id=2398216
https://github.com/ruby/rexml/commit/ce59f2eb1aeb371fe1643414f06618dbe031979f
https://github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6m
https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761/

Configurations

No configuration.

History

26 Jun 2026, 00:16

Type	Values Removed	Values Added
References		() https://github.com/ruby/rexml/commit/ce59f2eb1aeb371fe1643414f06618dbe031979f - () https://github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6m - () https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761/ -

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Se encontró una vulnerabilidad en REXML. Un atacante remoto podría explotar el análisis ineficiente de expresiones regulares (regex) al procesar referencias de caracteres numéricos hexadecimales (&#x...;) en documentos XML. Esto podría conducir a una Denegación de Servicio por Expresiones Regulares (ReDoS), impactando la disponibilidad del componente afectado. Este problema es el resultado de una corrección incompleta para CVE-2024-49761.

27 Feb 2026, 14:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-02-27 14:16

Updated : 2026-06-26 00:16

NVD link : CVE-2025-10990

Mitre link : CVE-2025-10990

CVE.ORG link : CVE-2025-10990

JSON object : View

Products Affected

No product.

CWE

CWE-1333

Inefficient Regular Expression Complexity

{"id": "CVE-2025-10990", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10990", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-27T18:43:48.686335Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"versions": [{"status": "unaffected", "version": "6.17.5"}, {"status": "unaffected", "version": "6.16.5.4"}], "packageName": "Red Hat Satellite", "collectionURL": "https://www.redhat.com/en/technologies/management/satellite", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:satellite:6.16::el8", "cpe:/a:redhat:satellite:6.16::el9", "cpe:/a:redhat:satellite_capsule:6.16::el8", "cpe:/a:redhat:satellite_capsule:6.16::el9", "cpe:/a:redhat:satellite_utils:6.16::el8", "cpe:/a:redhat:satellite_utils:6.16::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.16 for RHEL 8", "versions": [{"status": "unaffected", "version": "0:8.8.1-3.el8sat", "lessThan": "*", "versionType": "rpm"}], "packageName": "puppet-agent", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6.16::el8", "cpe:/a:redhat:satellite:6.16::el9", "cpe:/a:redhat:satellite_capsule:6.16::el8", "cpe:/a:redhat:satellite_capsule:6.16::el9", "cpe:/a:redhat:satellite_utils:6.16::el8", "cpe:/a:redhat:satellite_utils:6.16::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.16 for RHEL 8", "versions": [{"status": "unaffected", "version": "0:8.8.1-3.el8sat", "lessThan": "*", "versionType": "rpm"}], "packageName": "puppet-agent", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6.16::el8", "cpe:/a:redhat:satellite:6.16::el9", "cpe:/a:redhat:satellite_capsule:6.16::el8", "cpe:/a:redhat:satellite_capsule:6.16::el9", "cpe:/a:redhat:satellite_utils:6.16::el8", "cpe:/a:redhat:satellite_utils:6.16::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.16 for RHEL 9", "versions": [{"status": "unaffected", "version": "0:8.8.1-3.el9sat", "lessThan": "*", "versionType": "rpm"}], "packageName": "puppet-agent", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6.16::el8", "cpe:/a:redhat:satellite:6.16::el9", "cpe:/a:redhat:satellite_capsule:6.16::el8", "cpe:/a:redhat:satellite_capsule:6.16::el9", "cpe:/a:redhat:satellite_utils:6.16::el8", "cpe:/a:redhat:satellite_utils:6.16::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.16 for RHEL 9", "versions": [{"status": "unaffected", "version": "0:8.8.1-3.el9sat", "lessThan": "*", "versionType": "rpm"}], "packageName": "puppet-agent", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6.17::el9", "cpe:/a:redhat:satellite_capsule:6.17::el9", "cpe:/a:redhat:satellite_utils:6.17::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.17 for RHEL 9", "versions": [{"status": "unaffected", "version": "0:8.8.1-3.el9sat", "lessThan": "*", "versionType": "rpm"}], "packageName": "puppet-agent", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6.17::el9", "cpe:/a:redhat:satellite_capsule:6.17::el9", "cpe:/a:redhat:satellite_utils:6.17::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.17 for RHEL 9", "versions": [{"status": "unaffected", "version": "0:8.8.1-3.el9sat", "lessThan": "*", "versionType": "rpm"}], "packageName": "puppet-agent", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_satellite_client:6::el8", "cpe:/a:redhat:rhel_satellite_client:6::el9"], "vendor": "Red Hat", "product": "Satellite Client 6 for RHEL 8", "versions": [{"status": "unaffected", "version": "0:7.34.0-4.el8sat", "lessThan": "*", "versionType": "rpm"}], "packageName": "puppet-agent", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_satellite_client:6::el8", "cpe:/a:redhat:rhel_satellite_client:6::el9"], "vendor": "Red Hat", "product": "Satellite Client 6 for RHEL 9", "versions": [{"status": "unaffected", "version": "0:7.34.0-4.el9sat", "lessThan": "*", "versionType": "rpm"}], "packageName": "puppet-agent", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-02-27T14:16:27.567", "references": [{"url": "https://access.redhat.com/errata/RHSA-2025:17606", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:17613", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:17693", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2025-10990", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2398216", "source": "secalert@redhat.com"}, {"url": "https://github.com/ruby/rexml/commit/ce59f2eb1aeb371fe1643414f06618dbe031979f", "source": "secalert@redhat.com"}, {"url": "https://github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6m", "source": "secalert@redhat.com"}, {"url": "https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761/", "source": "secalert@redhat.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-1333"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in REXML. A remote attacker could exploit inefficient regular expression (regex) parsing when processing hex numeric character references (&#x...;) in XML documents. This could lead to a Regular Expression Denial of Service (ReDoS), impacting the availability of the affected component. This issue is the result of an incomplete fix for CVE-2024-49761."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en REXML. Un atacante remoto podr\u00eda explotar el an\u00e1lisis ineficiente de expresiones regulares (regex) al procesar referencias de caracteres num\u00e9ricos hexadecimales (&#x...;) en documentos XML. Esto podr\u00eda conducir a una Denegaci\u00f3n de Servicio por Expresiones Regulares (ReDoS), impactando la disponibilidad del componente afectado. Este problema es el resultado de una correcci\u00f3n incompleta para CVE-2024-49761."}], "lastModified": "2026-06-26T00:16:45.773", "sourceIdentifier": "secalert@redhat.com"}