Lucene search
RubySecRUBY:JRUBY-2010-1330-77297HistoryApr 25, 2010 - 8:00 p.m.
CVE-2010-1330 jruby: XSS in the regular expression engine when processing invalid UTF-8 byte sequences
2010-04-2520:00:00
RubySec
rubysec.com
6
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
75.8%
The regular expression engine in JRuby before 1.4.1, when $KCODE is set
to ‘u’, does not properly handle characters immediately after a UTF-8 character,
which allows remote attackers to conduct cross-site scripting (XSS) attacks via
a crafted string.
Related
nvd
nvd
CVE-2010-1330
2012-11-23 19:55:01
github
github
Cross-site Scripting in in JRuby
2022-05-02 06:21:36
prion
prion
Cross site scripting
2012-11-23 19:55:00
debiancve
debiancve
CVE-2010-1330
2012-11-23 19:55:01
cvelist
cvelist
CVE-2010-1330
2012-11-23 19:00:00
osv
osv
Cross-site Scripting in in JRuby
2022-05-02 06:21:36
cve
cve
CVE-2010-1330
2012-11-23 19:55:01
redhat
redhat
(RHSA-2011:1456) Moderate: JBoss Enterprise SOA Platform 5.2.0 update
2011-11-16 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
75.8%
Related for RUBY:JRUBY-2010-1330-77297