Vulnerability Details CVE-2025-27220
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.1%
CVSS Severity
CVSS v3 Score 4.0
Products affected by CVE-2025-27220
-
cpe:2.3:a:ruby-lang:cgi:0.1.0
-
cpe:2.3:a:ruby-lang:cgi:0.1.1
-
cpe:2.3:a:ruby-lang:cgi:0.2.0
-
cpe:2.3:a:ruby-lang:cgi:0.2.1
-
cpe:2.3:a:ruby-lang:cgi:0.3.0
-
cpe:2.3:a:ruby-lang:cgi:0.3.1
-
cpe:2.3:a:ruby-lang:cgi:0.3.6
-
cpe:2.3:a:ruby-lang:cgi:0.4.0
-
cpe:2.3:a:ruby-lang:cgi:0.4.1
-
cpe:2.3:a:ruby-lang:ruby:3.1.0
-
cpe:2.3:a:ruby-lang:ruby:3.2.0