Lucene search
GoogleOSV:GHSA-98MF-8F57-64QFHistoryOct 24, 2017 - 6:33 p.m.
actionpack Cross-site Scripting vulnerability
2017-10-2418:33:37
Google
osv.dev
21
0.002 Low
EPSS
Percentile
57.0%
Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the select_tag helper.
References
rhn.redhat.com/errata/RHSA-2013-0154.html
weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released
github.com/rails/rails/commit/6d0526db91afb0675c2ad3d871529d1536303c64
groups.google.com/g/rubyonrails-security/c/fV3QUToSMSw/m/eHBSFOUYHpYJ?pli=1
groups.google.com/group/rubyonrails-security/msg/961e18e514527078?dmode=source&output=gplain
nvd.nist.gov/vuln/detail/CVE-2012-3463
Related
debiancve
debiancve
CVE-2012-3463
2012-08-10 10:34:47
gitlab
gitlab
Ruby on Rails Potential XSS Vulnerability in select_tag prompt
2012-08-10 00:00:00
github
github
actionpack Cross-site Scripting vulnerability
2017-10-24 18:33:37
cve
cve
CVE-2012-3463
2012-08-10 10:34:47
cvelist
cvelist
CVE-2012-3463
2012-08-10 10:00:00
nvd
nvd
CVE-2012-3463
2012-08-10 10:34:47
seebug
seebug
Ruby on Rails 'select_tag()'ćšćłčˇ¨çŤčćŹć§čĄćźć´
2012-08-13 00:00:00
prion
prion
Cross site scripting
2012-08-10 10:34:00
ubuntucve
ubuntucve
CVE-2012-3463
2012-08-10 00:00:00
rubygems
rubygems
nessus
nessus
Fedora 16 : rubygem-actionpack-3.0.10-9.fc16 (2012-11870)
2012-08-23 00:00:00
Fedora 17 : rubygem-actionpack-3.0.11-7.fc17 (2012-11885)
2012-08-23 00:00:00
freebsd
freebsd
rubygem-rails -- multiple vulnerabilities
2012-08-08 00:00:00
openvas
openvas
FreeBSD Ports: rubygem-rails
2012-08-10 00:00:00
FreeBSD Ports: rubygem-rails
2012-08-10 00:00:00
Fedora Update for rubygem-actionpack FEDORA-2012-11885
2012-08-30 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-7.fc17
2012-08-22 21:11:17
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-8.fc17
2013-01-23 01:53:38
[SECURITY] Fedora 16 Update: rubygem-actionpack-3.0.10-9.fc16
2012-08-22 20:58:55
redhat
redhat
(RHSA-2013:0154) Critical: Ruby on Rails security update
2013-01-10 20:37:00
(RHSA-2013:0582) Moderate: Red Hat OpenShift Enterprise 1.1.1 update
2013-02-28 00:00:00