CVE-2013-6459

Опубликовано: 31 дек. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.

Ссылки

http://secunia.com/advisories/56180
Vendor Advisory
http://www.securityfocus.com/bid/64509
https://access.redhat.com/errata/RHSA-2018:0336
https://github.com/mislav/will_paginate/releases/tag/v3.0.5
Patch
Vendor Advisory
http://secunia.com/advisories/56180
Vendor Advisory
http://www.securityfocus.com/bid/64509
https://access.redhat.com/errata/RHSA-2018:0336
https://github.com/mislav/will_paginate/releases/tag/v3.0.5
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mislav_marohnic:will_paginate:*:-:-:*:-:ruby:*:*

Версия до 3.0.4 (включая)

cpe:2.3:a:mislav_marohnic:will_paginate:3.0:-:-:*:-:ruby:*:*

cpe:2.3:a:mislav_marohnic:will_paginate:3.0.1:-:-:*:-:ruby:*:*

cpe:2.3:a:mislav_marohnic:will_paginate:3.0.2:-:-:*:-:ruby:*:*

cpe:2.3:a:mislav_marohnic:will_paginate:3.0.3:-:-:*:-:ruby:*:*

EPSS

Процентиль: 52%

0.00292

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2013-6459

ubuntu

около 12 лет назад

CVE-2013-6459

CVSS3: 4.3

redhat

около 12 лет назад

CVE-2013-6459

debian

около 12 лет назад

Cross-site scripting (XSS) vulnerability in the will_paginate gem befo ...

GHSA-8r6h-7x9g-xmw9

github

больше 8 лет назад

will_paginate Cross-site Scripting vulnerability

EPSS

Процентиль: 52%

0.00292

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79