CVE-2025-27220 Security Details

CVE ID

CVE-2025-27220

CWE

CWE-1333

CVE Description

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

Published

Mar 4, 2025

CVSS Score & Severity

7.5High

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0.246%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

GitHub · Advisory · GHSA-mhwm-jh88-3gjfTHIRD_PARTY