Vulnerability advisory
GHSA-q58j-fmvf-9rq6
Cross site scripting in actionpack Rubygem
Also known as CVE-2011-1497
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected versions
Description
A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
References
- Advisorynvd.nist.gov/vuln/detail/CVE-2011-1497 ↗
- Webgithub.com/rails/rails/commit/61ee3449674c591747db95f9b3472c5c3bd9e84d ↗
- Webgithub.com/rails/rails/commit/ab764ecbfea31a3b14323283287e2fc80955ace6 ↗
- Packagegithub.com/rails/rails ↗
- Webgithub.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG ↗
- Webgithub.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-1497.yml ↗
- Webwww.openwall.com/lists/oss-security/2011/04/06/13 ↗