Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-3227
HistoryJun 14, 2007 - 12:00 a.m.

CVE-2007-3227

2007-06-1400:00:00
ubuntu.com
ubuntu.com
19

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.014 Low

EPSS

Percentile

86.5%

Cross-site scripting (XSS) vulnerability in the to_json
(ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606
allows remote attackers to inject arbitrary web script via the input
values.

Bugs

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.014 Low

EPSS

Percentile

86.5%