Описание
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| OpenShift Enterprise 1 | rubygem-haml | Affected | ||
| Red Hat CloudForms Tools 1 | rubygem-haml | Affected | ||
| Red Hat CloudForms Tools 1 | rubygem-rdoc | Will not fix | ||
| Red Hat Enterprise MRG 2 | rubygem-haml | Affected | ||
| Red Hat Subscription Asset Manager | rubygem-haml | Affected | ||
| CloudForms for RHEL 6 | rubygem-activesupport | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-delayed_job | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-nokogiri | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-rack | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-rails_warden | Fixed | RHSA-2013:0548 | 21.02.2013 |
Показывать по
Дополнительная информация
Статус:
5 Medium
CVSS2
Связанные уязвимости
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1 ...
5 Medium
CVSS2