Lucene search
RubySecRUBY:ACTIONPACK-2012-3463-84515HistoryAug 08, 2012 - 8:00 p.m.
CVE-2012-3463 rubygem-actionpack: potential XSS vulnerability in select_tag prompt
2012-08-0820:00:00
RubySec
rubysec.com
20
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
57.0%
Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb
in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows
remote attackers to inject arbitrary web script or HTML via the prompt field to
the select_tag helper.
| CPE | Name | Operator | Version |
|---|---|---|---|
| actionpack | le | 2.3.-1 | |
| actionpack | ge | 2.4.0 | |
| actionpack | le | 3.0.16 | |
| actionpack | ge | 3.1.0 | |
| actionpack | le | 3.1.7 | |
| actionpack | ge | 3.2.0 | |
| actionpack | lt | 3.2.8 |
References
Related
cve
cve
CVE-2012-3463
2012-08-10 10:34:47
cvelist
cvelist
CVE-2012-3463
2012-08-10 10:00:00
nvd
nvd
CVE-2012-3463
2012-08-10 10:34:47
gitlab
gitlab
Ruby on Rails Potential XSS Vulnerability in select_tag prompt
2012-08-10 00:00:00
github
github
actionpack Cross-site Scripting vulnerability
2017-10-24 18:33:37
seebug
seebug
Ruby on Rails 'select_tag()'ćšćłčˇ¨çŤčćŹć§čĄćźć´
2012-08-13 00:00:00
prion
prion
Cross site scripting
2012-08-10 10:34:00
osv
osv
actionpack Cross-site Scripting vulnerability
2017-10-24 18:33:37
ubuntucve
ubuntucve
CVE-2012-3463
2012-08-10 00:00:00
debiancve
debiancve
CVE-2012-3463
2012-08-10 10:34:47
nessus
nessus
Fedora 16 : rubygem-actionpack-3.0.10-9.fc16 (2012-11870)
2012-08-23 00:00:00
FreeBSD : rubygem-rails -- multiple vulnerabilities (31db9a18-e289-11e1-a57d-080027a27dbf)
2012-08-10 00:00:00
Fedora 17 : rubygem-actionpack-3.0.11-7.fc17 (2012-11885)
2012-08-23 00:00:00
freebsd
freebsd
rubygem-rails -- multiple vulnerabilities
2012-08-08 00:00:00
openvas
openvas
FreeBSD Ports: rubygem-rails
2012-08-10 00:00:00
FreeBSD Ports: rubygem-rails
2012-08-10 00:00:00
Fedora Update for rubygem-actionpack FEDORA-2012-11885
2012-08-30 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-7.fc17
2012-08-22 21:11:17
[SECURITY] Fedora 16 Update: rubygem-actionpack-3.0.10-9.fc16
2012-08-22 20:58:55
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-9.fc17
2013-03-30 21:27:37
redhat
redhat
(RHSA-2013:0154) Critical: Ruby on Rails security update
2013-01-10 20:37:00
(RHSA-2013:0582) Moderate: Red Hat OpenShift Enterprise 1.1.1 update
2013-02-28 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
57.0%
Related for RUBY:ACTIONPACK-2012-3463-84515