Lucene search

FreeBSD44FB0302-9D38-11DC-9114-001C2514716C

HistoryOct 12, 2007 - 12:00 a.m.

rubygem-rails -- JSON XSS vulnerability

2007-10-1200:00:00

vuxml.freebsd.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.014 Low

EPSS

Percentile

86.5%

JSON

Rails core team reports:

All users of Rails 1.2.4 or earlier are advised to upgrade
to 1.2.5, though it isn’t strictly necessary if you
aren’t working with JSON. For more information the JSON
vulnerability, see CVE-2007-3227.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchrubygem-rails< 1.2.5UNKNOWN
FreeBSDanynoarchrubygem-activesupport< 1.4.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	rubygem-rails	< 1.2.5	UNKNOWN
FreeBSD	any	noarch	rubygem-activesupport	< 1.4.4	UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.014 Low

EPSS

Percentile

86.5%

JSON

Related for 44FB0302-9D38-11DC-9114-001C2514716C