Podatność CVE-2011-4319

Podatność CVE-2011-4319

Publikacja: 2011-11-28 Modyfikacja: 2012-02-13

Opis:

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Ruby on rails -> Rails xss plugin
Ruby on rails -> Ruby on rails
Rubyonrails -> Ruby on rails
Rubyonrails -> Rails

http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b61d70fb73c7cc5?pli=1

http://groups.google.com/group/rubyonrails-security/msg/c65c24fbc4b6dd82?dmode=source&output=gplain

http://openwall.com/lists/oss-security/2011/11/18/8

http://weblog.rubyonrails.org/2011/11/18/rails-3-0-11-has-been-released

http://weblog.rubyonrails.org/2011/11/18/rails-3-1-2-has-been-released

http://www.securityfocus.com/bid/50722

http://www.securitytracker.com/id?1026342

https://exchange.xforce.ibmcloud.com/vulnerabilities/71364