medium6.1
CVE-2011-1497
A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
Impact
A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rubyonrails | Rails | before 3.0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG
- https://www.openwall.com/lists/oss-security/2011/04/06/13
- https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG
- https://www.openwall.com/lists/oss-security/2011/04/06/13