exploitDog

CVE-2012-3464

Опубликовано: 09 авг. 2012

Источник: redhat

CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=847199rubygem-actionpack: potential XSS vulnerability

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2012-3464

ubuntu

почти 14 лет назад

Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.

CVE-2012-3464

nvd

почти 14 лет назад

Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.

CVE-2012-3464

debian

почти 14 лет назад

Cross-site scripting (XSS) vulnerability in activesupport/lib/active_s ...

GHSA-h835-75hw-pj89

github

почти 9 лет назад

activesupport Cross-site Scripting vulnerability

4.3 Medium

CVSS2