exploitDog

CVE-2009-3009

Опубликовано: 03 сент. 2009

Источник: redhat

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=520843ruby-activesupport: XSS vulnerability

EPSS

Процентиль: 86%

0.03022

Низкий

Связанные уязвимости

CVE-2009-3009

ubuntu

почти 17 лет назад

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

CVE-2009-3009

nvd

почти 17 лет назад

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

CVE-2009-3009

debian

почти 17 лет назад

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2 ...

GHSA-8qrh-h9m2-5fvf

github

почти 9 лет назад

Cross site scripting that affects rails

EPSS

Процентиль: 86%

0.03022

Низкий