Lucene search
Ubuntu.comUB:CVE-2013-6416HistoryDec 07, 2013 - 12:00 a.m.
CVE-2013-6416
2013-12-0700:00:00
ubuntu.com
ubuntu.com
19
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.002
Percentile
56.9%
Cross-site scripting (XSS) vulnerability in the simple_format helper in
actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x
before 4.0.2 allows remote attackers to inject arbitrary web script or HTML
via a crafted HTML attribute.
Notes
| Author | Note |
|---|---|
| mdeslaur | in Oneiric+, rails package is just for transition |
| seth-arnold | Only affected 4.0.x and higher |
Related
gitlab
gitlab
XSS Vulnerability in simple_format helper
2013-12-06 00:00:00
github
github
actionpack Cross-site Scripting vulnerability
2017-10-24 18:33:36
osv
osv
actionpack Cross-site Scripting vulnerability
2017-10-24 18:33:36
prion
prion
Cross site scripting
2013-12-07 00:55:00
cve
cve
CVE-2013-6416
2013-12-07 00:55:03
debiancve
debiancve
CVE-2013-6416
2013-12-07 00:55:03
cvelist
cvelist
CVE-2013-6416
2013-12-07 00:00:00
rubygems
rubygems
XSS Vulnerability in simple_format helper
2013-12-02 20:00:00
nvd
nvd
CVE-2013-6416
2013-12-07 00:55:03
nessus
nessus
FreeBSD : rails -- multiple vulnerabilities (6a806960-3016-44ed-8575-8614a7cb57c7)
2013-12-09 00:00:00
Fedora 20 : rubygem-actionpack-4.0.0-2.fc20 (2013-23636)
2014-03-07 00:00:00
freebsd
freebsd
rails -- multiple vulnerabilities
2013-12-03 00:00:00
openvas
openvas
Fedora Update for rubygem-actionpack FEDORA-2013-23636
2014-03-12 00:00:00
Fedora Update for rubygem-actionpack FEDORA-2013-23636
2014-03-12 00:00:00
Fedora Update for rubygem-actionpack FEDORA-2014-3169
2014-03-12 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-4.fc20
2014-05-23 18:56:34
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-2.fc20
2014-03-07 06:36:05
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-3.fc20
2014-03-11 04:00:14
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.002
Percentile
56.9%
Related for UB:CVE-2013-6416