Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-3009HistorySep 08, 2009 - 6:30 p.m.
CVE-2009-3009
2009-09-0818:30:00
Debian Security Bug Tracker
security-tracker.debian.org
20
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.3%
Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | rails | <ย 2.2.3-1 | rails_2.2.3-1_all.deb |
| Debian | 11 | all | rails | <ย 2.2.3-1 | rails_2.2.3-1_all.deb |
| Debian | 10 | all | rails | <ย 2.2.3-1 | rails_2.2.3-1_all.deb |
| Debian | 999 | all | rails | <ย 2.2.3-1 | rails_2.2.3-1_all.deb |
| Debian | 13 | all | rails | <ย 2.2.3-1 | rails_2.2.3-1_all.deb |
Related
fedora
fedora
[SECURITY] Fedora 11 Update: rubygem-rails-2.3.2-5.fc11
2009-10-14 01:55:34
[SECURITY] Fedora 11 Update: rubygem-activeresource-2.3.2-2.fc11
2009-10-14 01:55:34
[SECURITY] Fedora 11 Update: rubygem-activesupport-2.3.3-2.fc11
2009-09-25 20:06:42
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-09-15 00:00:00
[SECURITY] [DSA 1887-1] New rails packages fix cross-site scripting
2009-09-15 00:00:00
seebug
seebug
Ruby on Rails่กจๅๅธฎๅฉ็จๅบUnicodeๅญ็ฌฆไธฒๅค็่ทจ็ซ่ๆฌๆผๆด
2009-09-08 00:00:00
cve
cve
CVE-2009-3009
2009-09-08 18:30:00
nessus
nessus
openvas
openvas
Fedora Core 10 FEDORA-2009-9799 (rubygem-activesupport)
2009-09-28 00:00:00
Fedora Core 11 FEDORA-2009-10484 (rubygem-actionmailer)
2009-10-19 00:00:00
Debian Security Advisory DSA 1887-1 (rails)
2009-09-21 00:00:00
debian
debian
[SECURITY] [DSA 1887-1] New rails packages fix cross-site scripting
2009-09-15 16:47:38
github
github
Cross site scripting that affects rails
2017-10-24 18:33:38
gitlab
gitlab
ubuntucve
ubuntucve
CVE-2009-3009
2009-09-08 00:00:00
osv
osv
Cross site scripting that affects rails
2017-10-24 18:33:38
prion
prion
Cross site scripting
2009-09-08 18:30:00
gentoo
gentoo
Ruby on Rails: Multiple vulnerabilities
2009-12-20 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.3%
Related for DEBIANCVE:CVE-2009-3009