NetSight
IP …
medium4.3

CVE-2013-0256

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to…

Impact

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Affected products

VendorProductAffected versions
Ruby-LangRdoc
from 2.3.0 before 3.12
Version 4.0.0
Ruby-LangRuby
Versions 1.9, 1.9.1, 1.9.2, 1.9.3, 2.0, 2.0.0
CanonicalUbuntu Linux
Versions 12.04, 12.10

Weakness classification

CWE-79

References