Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-0256
HistoryMar 01, 2013 - 5:40 a.m.

CVE-2013-0256

2013-03-0105:40:17
CWE-79
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.1%

JSON

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Affected configurations

NVD
Node
ruby-langrdocRange2.3.0–3.12ruby
OR
ruby-langrdocMatch4.0.0preview2ruby
OR
ruby-langrubyMatch1.9
OR
ruby-langrubyMatch1.9.1
OR
ruby-langrubyMatch1.9.2
OR
ruby-langrubyMatch1.9.3
OR
ruby-langrubyMatch1.9.3p0
OR
ruby-langrubyMatch1.9.3p125
OR
ruby-langrubyMatch1.9.3p194
OR
ruby-langrubyMatch1.9.3p286
OR
ruby-langrubyMatch1.9.3p383
OR
ruby-langrubyMatch2.0
OR
ruby-langrubyMatch2.0.0
OR
ruby-langrubyMatch2.0.0rc1
OR
ruby-langrubyMatch2.0.0rc2
Node
canonicalubuntu_linuxMatch12.04-
OR
canonicalubuntu_linuxMatch12.10

Related

cve 1
veracode 3
github 1
fedora 2
nessus 10
openvas 7
ubuntucve 1
prion 1
freebsd 1
hackerone 2
cvelist 1
osv 2
redhat 3
rubygems 1
suse 1
securityvulns 2
ubuntu 1
debian 1
cve
cve
CVE-2013-0256
2013-03-01 05:40:17
veracode
veracode
Cross-Site Scripting (XSS) In Darkfish.js
2019-01-15 08:51:23
Arbitrary Code Execution
2019-05-02 04:44:25
Input Validation Bypass
2019-05-02 04:44:16
github
github
RDoc contains XSS vulnerability
2017-10-24 18:33:37
fedora
fedora
[SECURITY] Fedora 17 Update: rubygem-rdoc-3.12-5.fc17
2013-05-07 18:25:46
[SECURITY] Fedora 18 Update: rubygem-rdoc-3.12-6.fc18
2013-05-07 18:36:41
nessus
nessus
FreeBSD : Ruby -- XSS exploit of RDoc documentation generated by rdoc (d3e96508-056b-4259-88ad-50dc8d1978a6)
2013-02-17 00:00:00
Fedora 17 : rubygem-rdoc-3.12-5.fc17 (2013-2143)
2013-05-08 00:00:00
RHEL 6 : rubygem packages (RHSA-2013:0728)
2018-12-06 00:00:00
openvas
openvas
Fedora Update for rubygem-rdoc FEDORA-2013-2143
2013-05-09 00:00:00
Fedora Update for rubygem-rdoc FEDORA-2013-2131
2013-05-09 00:00:00
Fedora Update for rubygem-rdoc FEDORA-2013-2143
2013-05-09 00:00:00
ubuntucve
ubuntucve
CVE-2013-0256
2013-02-06 00:00:00
prion
prion
Cross site scripting
2013-03-01 05:40:00
freebsd
freebsd
Ruby -- XSS exploit of RDoc documentation generated by rdoc
2013-02-06 00:00:00
hackerone
hackerone
Ruby: XSS exploit of RDoc documentation generated by rdoc
2021-08-27 12:35:33
Ruby: XSS exploit of RDoc documentation generated by rdoc (CVE-2013-0256)
2023-05-08 13:58:42
cvelist
cvelist
CVE-2013-0256
2013-03-01 02:00:00
osv
osv
RDoc contains XSS vulnerability
2017-10-24 18:33:37
ruby1.9.1 - security update
2015-05-30 00:00:00
redhat
redhat
(RHSA-2013:0728) Moderate: rubygem packages security update
2013-04-09 00:00:00
(RHSA-2013:0701) Moderate: ruby193-ruby, rubygem-json and rubygem-rdoc security update
2013-04-02 00:00:00
(RHSA-2013:0686) Moderate: Subscription Asset Manager 1.2.1 update
2013-03-26 00:00:00
rubygems
rubygems
CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template
2013-02-05 20:00:00
suse
suse
Security update for Ruby 1.9 (important)
2013-04-09 19:05:05
securityvulns
securityvulns
Ruby multiple security vulnerabilities
2013-02-24 00:00:00
[USN-1733-1] Ruby vulnerabilities
2013-02-24 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2013-02-21 00:00:00
debian
debian
[SECURITY] [DLA 235-1] ruby1.9.1 security update
2015-05-30 20:45:15

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.1%

JSON
Related for NVD:CVE-2013-0256
cve1veracode3github1fedora2nessus10openvas7ubuntucve1prion1freebsd1hackerone2cvelist1osv2redhat3rubygems1suse1securityvulns2ubuntu1debian1