CVE-2013-0256

2013-03-01T05:40:00
ID CVE-2013-0256
Type cve
Reporter cve@mitre.org
Modified 2013-06-05T03:40:00

Description

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL. Per http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/ Affected versions All ruby 1.9 versions prior to ruby 1.9.3 patchlevel 383 All ruby 2.0 versions prior to ruby 2.0.0 rc2 or prior to trunk revision 39102