exploitDog

CVE-2009-3009

Опубликовано: 03 сент. 2009

Источник: redhat

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=520843ruby-activesupport: XSS vulnerability

EPSS

Процентиль: 81%

0.01632

Низкий

Связанные уязвимости

CVE-2009-3009

ubuntu

больше 16 лет назад

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

CVE-2009-3009

nvd

больше 16 лет назад

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

CVE-2009-3009

debian

больше 16 лет назад

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2 ...

GHSA-8qrh-h9m2-5fvf

github

около 8 лет назад

Cross site scripting that affects rails

EPSS

Процентиль: 81%

0.01632

Низкий