Lucene search

CVE-2009-3009

🗓️ 08 Sep 2009 18:00:30Reported by [email protected]Type

Cross-site scripting vulnerability in Ruby on Rails 2.x before 2.2.3 and 2.3.x before 2.3.

Reporter	Title	Published	Views	Family All 57
Tenable Nessus	Debian DSA-1887-1 : rails - missing input sanitising	24 Feb 201000:00	–	nessus
Tenable Nessus	Fedora 11 : rubygem-actionpack-2.3.3-2.fc11 / rubygem-activesupport-2.3.3-2.fc11 (2009-9922)	28 Sep 200900:00	–	nessus
Tenable Nessus	Fedora 10 : rubygem-actionpack-2.1.1-3.fc10 / rubygem-activesupport-2.1.1-2.fc10 (2009-9799)	25 Sep 200900:00	–	nessus
Tenable Nessus	Fedora 11 : rubygem-actionmailer-2.3.2-3.fc11 / rubygem-actionpack-2.3.2-2.fc11 / etc (2009-10484)	15 Oct 200900:00	–	nessus
Tenable Nessus	openSUSE Security Update : rubygem-activesupport-2_1 (rubygem-activesupport-2_1-1321)	22 Oct 200900:00	–	nessus
Tenable Nessus	openSUSE Security Update : rubygem-actionpack-2_1 (rubygem-actionpack-2_1-1320)	22 Oct 200900:00	–	nessus
Tenable Nessus	GLSA-200912-02 : Ruby on Rails: Multiple vulnerabilities	22 Dec 200900:00	–	nessus
Tenable Nessus	Mac OS X Multiple Vulnerabilities (Security Update 2010-002)	29 Mar 201000:00	–	nessus
Tenable Nessus	Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities	29 Mar 201000:00	–	nessus
CVE	CVE-2009-3009	8 Sep 200918:30	–	cve

Nvd

Node

rubyonrails railsMatch2.0.0

rubyonrails railsMatch2.0.0rc1

rubyonrails railsMatch2.0.0rc2

rubyonrails railsMatch2.0.1

rubyonrails railsMatch2.0.2

rubyonrails railsMatch2.0.4

rubyonrails railsMatch2.1.0

rubyonrails railsMatch2.1.1

rubyonrails railsMatch2.1.2

rubyonrails railsMatch2.2.0

rubyonrails railsMatch2.2.1

rubyonrails railsMatch2.2.2

rubyonrails railsMatch2.3.2

rubyonrails railsMatch2.3.3

Source	Link
lists	www.lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/53036
support	www.support.apple.com/kb/HT4077
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
osvdb	www.osvdb.org/57666
secunia	www.secunia.com/advisories/36600
debian	www.debian.org/security/2009/dsa-1887
securityfocus	www.securityfocus.com/bid/36278
vupen	www.vupen.com/english/advisories/2009/2544
secunia	www.secunia.com/advisories/36717

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Sep 2009 18:30Current

7.8High risk

Vulners AI Score7.8

CVSS24.3

EPSS0.003

CWE-79