Lucene search
HistoryDec 07, 2013 - 12:55 a.m.
CVE-2013-6416
cve-2013-6416
xss
vulnerability
ruby on rails 4.x
nvd
web script
html
5.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.3%
Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rubyonrails:rails | rubyonrails rails | eq | 4.0.0 |
| rubyonrails:rails | rubyonrails rails | le | 4.0.1 |
Related
gitlab
gitlab
XSS Vulnerability in simple_format helper
2013-12-06 00:00:00
github
github
actionpack Cross-site Scripting vulnerability
2017-10-24 18:33:36
osv
osv
actionpack Cross-site Scripting vulnerability
2017-10-24 18:33:36
prion
prion
Cross site scripting
2013-12-07 00:55:00
ubuntucve
ubuntucve
CVE-2013-6416
2013-12-07 00:00:00
debiancve
debiancve
CVE-2013-6416
2013-12-07 00:55:00
nessus
nessus
FreeBSD : rails -- multiple vulnerabilities (6a806960-3016-44ed-8575-8614a7cb57c7)
2013-12-09 00:00:00
Fedora 20 : rubygem-actionpack-4.0.0-2.fc20 (2013-23636)
2014-03-07 00:00:00
freebsd
freebsd
rails -- multiple vulnerabilities
2013-12-03 00:00:00
openvas
openvas
Fedora Update for rubygem-actionpack FEDORA-2013-23636
2014-03-12 00:00:00
Fedora Update for rubygem-actionpack FEDORA-2013-23636
2014-03-12 00:00:00
Fedora Update for rubygem-actionpack FEDORA-2014-6098
2014-05-26 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-4.fc20
2014-05-23 18:56:34
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-2.fc20
2014-03-07 06:36:05
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-3.fc20
2014-03-11 04:00:14
5.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.3%
Related for CVE-2013-6416