Lucene search
HistoryDec 31, 2013 - 4:04 p.m.
CVE-2013-6459
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.3%
Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.
Affected configurations
Node
mislav_marohnicwill_paginateRange≤3.0.4---ruby
ORmislav_marohnicwill_paginateMatch3.0---ruby
ORmislav_marohnicwill_paginateMatch3.0.1---ruby
ORmislav_marohnicwill_paginateMatch3.0.2---ruby
ORmislav_marohnicwill_paginateMatch3.0.3---ruby
Related
fedora
fedora
[SECURITY] Fedora 19 Update: rubygem-will_paginate-3.0.4-5.fc19
2014-01-21 05:52:47
[SECURITY] Fedora 20 Update: rubygem-will_paginate-3.0.4-5.fc20
2014-01-21 05:55:12
ubuntucve
ubuntucve
CVE-2013-6459
2013-12-31 00:00:00
debiancve
debiancve
CVE-2013-6459
2013-12-31 16:04:23
osv
osv
will_paginate Cross-site Scripting vulnerability
2017-10-24 18:33:36
cvelist
cvelist
CVE-2013-6459
2013-12-31 15:00:00
nessus
nessus
Fedora 20 : rubygem-will_paginate-3.0.4-5.fc20 (2014-0066)
2014-01-21 00:00:00
Fedora 19 : rubygem-will_paginate-3.0.4-5.fc19 (2014-0094)
2014-01-21 00:00:00
RHEL 7 : Satellite 6.3 (RHSA-2018:0336)
2018-02-28 00:00:00
veracode
veracode
Cross-site Scripting (XSS) Through Generated Pagination Links
2019-01-15 09:21:53
cve
cve
CVE-2013-6459
2013-12-31 16:04:23
prion
prion
Cross site scripting
2013-12-31 16:04:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0054)
2022-01-28 00:00:00
seebug
seebug
Ruby will_paginate Gem跨站脚本漏洞
2014-01-06 00:00:00
mageia
mageia
Updated ruby-will_paginate package fixes CVE-2013-6459
2014-02-12 02:37:02
github
github
will_paginate Cross-site Scripting vulnerability
2017-10-24 18:33:36
rubygems
rubygems
CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities
2013-09-18 20:00:00
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.3%
Related for NVD:CVE-2013-6459