4.3
CVSSv2

CVE-2012-3465

Published: 10/08/2012 Updated: 08/08/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails prior to 3.0.17, 3.1.x prior to 3.1.8, and 3.2.x prior to 3.2.8 allows remote malicious users to inject arbitrary web script or HTML via malformed HTML markup.

Vulnerable Product Search on Vulmon Subscribe to Product

rubyonrails rails 3.0.14

rubyonrails rails 3.0.8

rubyonrails rails 3.0.9

rubyonrails rails 3.0.6

rubyonrails rails 3.0.2

rubyonrails rails 3.0.3

rubyonrails rails 3.0.11

rubyonrails rails 3.0.0

rubyonrails ruby on rails

rubyonrails rails 2.1.2

rubyonrails rails 2.1.0

rubyonrails rails 2.0.0

rubyonrails rails 2.3.3

rubyonrails rails 1.2.4

rubyonrails rails 1.2.3

rubyonrails rails 1.2.2

rubyonrails rails 1.1.2

rubyonrails rails 1.1.1

rubyonrails rails 0.9.2

rubyonrails rails 0.9.3

rubyonrails ruby on rails 0.5.7

rubyonrails ruby on rails 0.6.0

rubyonrails ruby on rails 0.6.5

rubyonrails rails 0.13.1

rubyonrails rails 0.14.3

rubyonrails rails 3.0.7

rubyonrails rails 3.0.5

rubyonrails rails 3.0.1

rubyonrails rails 3.0.10

rubyonrails rails 3.0.12

rubyonrails rails 2.2.1

rubyonrails rails 2.1.1

rubyonrails rails 2.0.1

rubyonrails rails 1.2.6

rubyonrails rails 1.2.5

rubyonrails rails 1.1.4

rubyonrails rails 1.1.3

rubyonrails ruby on rails 0.9.0

rubyonrails rails 0.9.1

rubyonrails ruby on rails 0.5.5

rubyonrails ruby on rails 0.5.6

rubyonrails rails 0.12.1

rubyonrails rails 0.14.1

rubyonrails rails 3.0.4

rubyonrails rails 3.0.13

rubyonrails rails 2.3.10

rubyonrails rails 2.2.0

rubyonrails rails 2.0.4

rubyonrails rails 2.3.4

rubyonrails rails 1.9.5

rubyonrails rails 1.1.6

rubyonrails rails 1.1.5

rubyonrails ruby on rails 0.8.0

rubyonrails ruby on rails 0.8.5

rubyonrails rails 0.14.4

rubyonrails ruby on rails 0.5.0

rubyonrails rails 0.11.1

rubyonrails rails 0.13.0

rubyonrails rails 0.11.0

rubyonrails rails 0.10.1

rubyonrails ruby on rails 3.0.4

rubyonrails rails 2.3.11

rubyonrails rails 2.3.12

rubyonrails rails 2.2.2

rubyonrails rails 2.0.2

rubyonrails rails 2.3.2

rubyonrails rails 2.3.9

rubyonrails rails 1.2.1

rubyonrails rails 1.2.0

rubyonrails rails 1.1.0

rubyonrails rails 1.0.0

rubyonrails rails 0.9.4

rubyonrails rails 0.9.4.1

rubyonrails ruby on rails 0.7.0

rubyonrails rails 0.12.0

rubyonrails rails 0.14.2

rubyonrails rails 0.10.0

rubyonrails rails 3.1.0

rubyonrails rails 3.1.7

rubyonrails rails 3.1.1

rubyonrails rails 3.1.5

rubyonrails rails 3.1.2

rubyonrails rails 3.1.6

rubyonrails rails 3.1.3

rubyonrails rails 3.1.4

rubyonrails rails 3.2.7

rubyonrails rails 3.2.2

rubyonrails rails 3.2.3

rubyonrails rails 3.2.4

rubyonrails rails 3.2.0

rubyonrails rails 3.2.1

rubyonrails rails 3.2.6

rubyonrails rails 3.2.5

Vendor Advisories

Debian Bug report logs - #684454 ruby-actionpack-32: CVE-2012-3463 / CVE-2012-3464 / CVE-2012-3465 Package: ruby-actionpack-32; Maintainer for ruby-actionpack-32 is (unknown); Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Fri, 10 Aug 2012 07:30:02 UTC Severity: grave Tags: security Fixed in version ruby-action ...
Synopsis Critical: Ruby on Rails security update Type/Severity Security Advisory: Critical Topic Updated rubygem-actionpack, rubygem-activesupport, and rubygem-activerecordpackages that fix multiple security issues are now available for Red HatSubscription Asset ManagerThe Red Hat Security Response Team ha ...
Synopsis Moderate: Red Hat OpenShift Enterprise 111 update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Enterprise 111 is now availableThe Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability Scoring System (CVSS) base scores, ...
Several cross-site-scripting and denial of service vulnerabilities were discovered in Ruby on Rails, a Ruby framework for web application development For the stable distribution (squeeze), these problems have been fixed in version 235-12+squeeze8 For the testing distribution (wheezy) and the unstable distribution (sid), these problems have bee ...