Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-5AF31415698B2FAAF1E24F701ED1CC55HistoryDec 06, 2013 - 12:00 a.m.
Reflective XSS Vulnerability
2013-12-0600:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
15
EPSS
0.005
Percentile
76.1%
There is a vulnerability in the internationalisation component of Ruby on Rails. When the i18n gem is unable to provide a translation for a given string, it creates a fallback HTML string. Under certain common configurations this string can contain user input which would allow an attacker to execute a reflective XSS attack.
References
Related
cvelist
cvelist
CVE-2013-4491
2013-12-07 00:00:00
nvd
nvd
CVE-2013-4491
2013-12-07 00:55:03
prion
prion
Cross site scripting
2013-12-07 00:55:00
osv
osv
actionpack vulnerable to Cross-site Scripting
2017-10-24 18:33:37
veracode
veracode
Cross-site Scripting (XSS)
2019-01-15 08:52:53
cve
cve
CVE-2013-4491
2013-12-07 00:55:03
github
github
actionpack vulnerable to Cross-site Scripting
2017-10-24 18:33:37
ubuntucve
ubuntucve
CVE-2013-4491
2013-12-07 00:00:00
debiancve
debiancve
CVE-2013-4491
2013-12-07 00:55:03
rubygems
rubygems
Reflective XSS Vulnerability in Ruby on Rails
2013-12-02 20:00:00
redhat
redhat
(RHSA-2014:0008) Important: ruby193-rubygem-actionpack security update
2014-01-06 00:00:00
(RHSA-2013:1794) Important: ruby193-rubygem-actionpack security update
2013-12-05 00:00:00
(RHSA-2014:1863) Important: Subscription Asset Manager 1.4 security update
2014-11-17 00:00:00
openvas
openvas
Debian Security Advisory DSA 2888-1 (ruby-actionpack-3.2 - security update)
2014-03-27 00:00:00
Debian: Security Advisory (DSA-2888-1)
2014-03-26 00:00:00
Fedora Update for rubygem-actionpack FEDORA-2014-0970
2014-01-27 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2888-1] ruby-actionpack-3.2 security update
2014-05-04 00:00:00
Ruby Actionpack / Actionmailer multiple security vulnerabilities
2014-05-04 00:00:00
nessus
nessus
openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2013:1906-1)
2014-06-13 00:00:00
Debian DSA-2888-1 : ruby-actionpack-3.2 - security update
2014-03-28 00:00:00
openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2013:1904-1)
2014-06-13 00:00:00
freebsd
freebsd
rails -- multiple vulnerabilities
2013-12-03 00:00:00
debian
debian
[SECURITY] [DSA 2888-1] ruby-actionpack-3.2 security update
2014-03-27 15:04:16
fedora
fedora
[SECURITY] Fedora 19 Update: rubygem-actionpack-3.2.13-4.fc19
2014-01-24 07:50:26
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-2.fc20
2014-03-07 06:36:05
[SECURITY] Fedora 19 Update: rubygem-actionpack-3.2.13-5.fc19
2014-03-11 04:11:08