CVE-2015-3226

Опубликовано: 26 июл. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rubyonrails:rails:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.0:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.2:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.3:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.4:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.7:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.8:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.9:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.12:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.13:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.15:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.16:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:3.2.17:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.0:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.6:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:ruby_on_rails:3.2.14:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00212

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2015-3226

ubuntu

больше 10 лет назад

CVE-2015-3226

redhat

больше 10 лет назад

CVE-2015-3226

debian

больше 10 лет назад

Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active ...

GHSA-vxvp-4xwc-jpp6

github

больше 8 лет назад

activesupport Cross-site Scripting vulnerability

EPSS

Процентиль: 44%

0.00212

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79