Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-1497

Опубликовано: 06 апр. 2011
Источник: redhat
CVSS3: 7.5

Описание

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
CloudForms Management Engine 5cfme-gemsetNot affected
Red Hat 3scale API Management Platform 2railsNot affected
Red Hat Satellite 6tfm-ror52-rubygem-railsNot affected
Red Hat Satellite 6tfm-rubygem-railsNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=2015262rubygem-actionpack: Cross-site scripting in auto_link function

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 5 лет назад

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

CVSS3: 6.1
nvd
почти 5 лет назад

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

CVSS3: 6.1
debian
почти 5 лет назад

A cross-site scripting vulnerability flaw was found in the auto_link f ...

CVSS3: 6.1
github
больше 4 лет назад

Cross site scripting in actionpack Rubygem

7.5 High

CVSS3