Lucene search

Gentoo FoundationMGASA-2014-0054

HistoryFeb 12, 2014 - 2:37 a.m.

Updated ruby-will_paginate package fixes CVE-2013-6459

2014-02-1202:37:02

Gentoo Foundation

advisories.mageia.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.9%

JSON

Updated ruby-will_paginate packages fix security vulnerability: Cross-Site Scripting (XSS) vulnerabilities were found in will_paginate gem for Ruby, where certain input related to generated pagination links were not properly sanitised before being returned. This could be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site. (CVE-2013-6459).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchruby-will_paginate< 3.0.3-3.1ruby-will_paginate-3.0.3-3.1.mga3

OS	Version	Architecture	Package	Version	Filename
Mageia	3	noarch	ruby-will_paginate	< 3.0.3-3.1	ruby-will_paginate-3.0.3-3.1.mga3

References

seclists.org/oss-sec/2013/q4/550

bugs.mageia.org/show_bug.cgi?id=12387

lists.fedoraproject.org/pipermail/package-announce/2014-January/126924.html

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.9%

JSON

Related for MGASA-2014-0054