Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
rubygemsRubySecRUBY:ACTIONPACK-2012-1099-79727
HistoryFeb 29, 2012 - 8:00 p.m.

CVE-2012-1099 rubygem-actionpack: XSS in the "select" helper

2012-02-2920:00:00
RubySec
rubysec.com
15
JSON

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb
in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and
3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML
via vectors involving certain generation of OPTION elements within SELECT elements.

Related

nessus 4
cve 1
osv 2
ubuntucve 1
debiancve 1
openvas 24
prion 1
securityvulns 2
github 1
gitlab 1
debian 1
fedora 11
nessus
nessus
Fedora 15 : rubygem-actionpack-3.0.5-6.fc15 (2012-3355)
2012-03-19 00:00:00
Debian DSA-2466-1 : rails - XSS
2012-05-10 00:00:00
Fedora 17 : rubygem-actionpack-3.0.11-2.fc17 / rubygem-activesupport-3.0.11-3.fc17 (2012-3166)
2012-03-12 00:00:00
cve
cve
CVE-2012-1099
2012-03-13 10:55:00
osv
osv
rails - cross site scripting
2012-05-09 00:00:00
Cross-site Scripting in actionpack
2017-10-24 18:33:38
ubuntucve
ubuntucve
CVE-2012-1099
2012-03-13 00:00:00
debiancve
debiancve
CVE-2012-1099
2012-03-13 10:55:00
openvas
openvas
Debian: Security Advisory (DSA-2466-1)
2012-05-31 00:00:00
Debian Security Advisory DSA 2466-1 (rails)
2012-05-31 00:00:00
Fedora Update for rubygem-activesupport FEDORA-2012-3166
2012-08-30 00:00:00
prion
prion
Cross site scripting
2012-03-13 10:55:00
securityvulns
securityvulns
[SECURITY] [DSA 2466-1] rails security update
2012-05-14 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2012-05-14 00:00:00
github
github
Cross-site Scripting in actionpack
2017-10-24 18:33:38
gitlab
gitlab
XSS via posted select tag options
2012-03-13 00:00:00
debian
debian
[SECURITY] [DSA 2466-1] rails security update
2012-05-09 17:30:46
fedora
fedora
[SECURITY] Fedora 17 Update: rubygem-activesupport-3.0.11-3.fc17
2012-03-11 17:01:21
[SECURITY] Fedora 16 Update: rubygem-activesupport-3.0.10-2.fc16
2012-03-17 23:41:07
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-2.fc17
2012-03-11 17:01:21
JSON
Related for RUBY:ACTIONPACK-2012-1099-79727
nessus4cve1osv2ubuntucve1debiancve1openvas24prion1securityvulns2github1gitlab1debian1fedora11