Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-7G65-GHRG-HPF5
HistoryOct 24, 2017 - 6:33 p.m.

actionpack Cross-site Scripting vulnerability

2017-10-2418:33:37
CWE-79
GitHub Advisory Database
github.com
26

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.3%

JSON

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.

Affected configurations

Vulners
Node
actionpack_projectactionpackRange3.2.0–3.2.8ruby
OR
actionpack_projectactionpackRange3.1.0–3.1.8ruby
OR
actionpack_projectactionpackRange<3.0.17ruby
VendorProductVersionCPE
actionpack_projectactionpack*cpe:2.3:a:actionpack_project:actionpack:*:*:*:*:*:ruby:*:*

Related

ubuntucve 1
seebug 1
gitlab 1
cvelist 1
cve 1
nvd 1
debiancve 1
prion 1
osv 1
rubygems 1
nessus 8
freebsd 1
openvas 14
fedora 5
debian 1
redhat 2
ubuntucve
ubuntucve
CVE-2012-3465
2012-08-10 00:00:00
seebug
seebug
Ruby on Rails 'strip_tags()'跨站脚本执行漏洞
2012-08-13 00:00:00
gitlab
gitlab
XSS Vulnerability in strip_tags
2012-08-10 00:00:00
cvelist
cvelist
CVE-2012-3465
2012-08-10 10:00:00
cve
cve
CVE-2012-3465
2012-08-10 10:34:47
nvd
nvd
CVE-2012-3465
2012-08-10 10:34:47
debiancve
debiancve
CVE-2012-3465
2012-08-10 10:34:47
prion
prion
Cross site scripting
2012-08-10 10:34:00
osv
osv
actionpack Cross-site Scripting vulnerability
2017-10-24 18:33:37
rubygems
rubygems
CVE-2012-3465 rubygem-actionpack: XSS Vulnerability in strip_tags
2012-08-08 20:00:00
nessus
nessus
openSUSE Security Update : rubygem-actionpack-2_3 / rubygem-activesupport-2_3 (openSUSE-SU-2012:1218-1)
2014-06-13 00:00:00
Fedora 17 : rubygem-actionpack-3.0.11-7.fc17 (2012-11885)
2012-08-23 00:00:00
Fedora 16 : rubygem-actionpack-3.0.10-9.fc16 (2012-11870)
2012-08-23 00:00:00
freebsd
freebsd
rubygem-rails -- multiple vulnerabilities
2012-08-08 00:00:00
openvas
openvas
FreeBSD Ports: rubygem-rails
2012-08-10 00:00:00
FreeBSD Ports: rubygem-rails
2012-08-10 00:00:00
Debian: Security Advisory (DSA-2655-1)
2013-03-27 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-7.fc17
2012-08-22 21:11:17
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-8.fc17
2013-01-23 01:53:38
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-9.fc17
2013-03-30 21:27:37
debian
debian
[SECURITY] [DSA 2655-1] rails security update
2013-03-28 16:15:56
redhat
redhat
(RHSA-2013:0154) Critical: Ruby on Rails security update
2013-01-10 20:37:00
(RHSA-2013:0582) Moderate: Red Hat OpenShift Enterprise 1.1.1 update
2013-02-28 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.3%

JSON
Related for GHSA-7G65-GHRG-HPF5
ubuntucve1seebug1gitlab1cvelist1cve1nvd1debiancve1prion1osv1rubygems1nessus8freebsd1openvas14fedora5debian1redhat2