DebianDEBIAN:DLA-167-1:37FB8[SECURITY] [DLA 167-1] redcloth security update
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.3%
Package : redcloth
Version : 4.2.2-1.1+deb6u1
CVE ID : CVE-2012-6684
Debian Bug : 774748
Kousuke Ebihara discovered that redcloth, a Ruby module used to
convert Textile markup to HTML, did not properly sanitize its
input. This allowed a remote attacker to perform a cross-site
scripting attack by injecting arbitrary JavaScript code into the
generated HTML.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 6 | all | libredcloth-ruby1.9.1 | < 4.2.2-1.1+deb6u1 | libredcloth-ruby1.9.1_4.2.2-1.1+deb6u1_all.deb |
| Debian | 6 | all | redcloth | < 4.2.2-1.1+deb6u1 | redcloth_4.2.2-1.1+deb6u1_all.deb |
| Debian | 6 | all | libredcloth-ruby-doc | < 4.2.2-1.1+deb6u1 | libredcloth-ruby-doc_4.2.2-1.1+deb6u1_all.deb |
| Debian | 6 | all | libredcloth-ruby | < 4.2.2-1.1+deb6u1 | libredcloth-ruby_4.2.2-1.1+deb6u1_all.deb |
| Debian | 6 | all | libredcloth-ruby1.8 | < 4.2.2-1.1+deb6u1 | libredcloth-ruby1.8_4.2.2-1.1+deb6u1_all.deb |
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
58.3%