Published: 01/03/2013 Updated: 09/09/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

darkfish.js in RDoc 2.3.0 up to and including 3.12 and 4.x prior to 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via a crafted URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ruby-lang rdoc
ruby-lang rdoc 4.0.0
ruby-lang ruby 1.9
ruby-lang ruby 1.9.1
ruby-lang ruby 1.9.2
ruby-lang ruby 1.9.3
ruby-lang ruby 2.0
ruby-lang ruby 2.0.0
canonical ubuntu linux 12.04
canonical ubuntu linux 12.10

Several security issues were fixed in Ruby ...

Synopsis Moderate: rubygem packages security update Type/Severity Security Advisory: Moderate Topic This update fixes one security issue in multiple rubygem packages forRed Hat OpenShift Enterprise 113The Red Hat Security Response Team has rated this update as having moderatesecurity impact A Common Vul ...

Synopsis Moderate: ruby193-ruby, rubygem-json and rubygem-rdoc security update Type/Severity Security Advisory: Moderate Topic Updated ruby193-ruby, rubygem-json and rubygem-rdoc packages that fix twosecurity issues are now available for Red Hat OpenShift Enterprise 113The Red Hat Security Response Team ...

Synopsis Moderate: Subscription Asset Manager 121 update Type/Severity Security Advisory: Moderate Topic Red Hat Subscription Asset Manager 121, which fixes several securityissues, multiple bugs, and adds various enhancements, is now availableThe Red Hat Security Response Team has rated this update as ...

CWE-79 https://bugzilla.redhat.com/show_bug.cgi?id=907820 http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60 http://rhn.redhat.com/errata/RHSA-2013-0548.html http://blog.segment7.net/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2 http://lists.opensuse.org/opensuse-updates/2013-02/msg00048.html http://www.ubuntu.com/usn/USN-1733-1 http://secunia.com/advisories/52774 http://rhn.redhat.com/errata/RHSA-2013-0686.html http://rhn.redhat.com/errata/RHSA-2013-0701.html http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html http://rhn.redhat.com/errata/RHSA-2013-0728.html https://nvd.nist.gov https://usn.ubuntu.com/1733-1/

CVE-2013-0256

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect