Lucene search

K
rubygemsRubySecRUBY:RDOC-2013-0256-90004
HistoryFeb 05, 2013 - 8:00 p.m.

CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template

2013-02-0520:00:00
RubySec
rubysec.com
9

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1,
as used in Ruby, does not properly generate documents, which allows remote attackers
to conduct cross-site scripting (XSS) attacks via a crafted URL.

CPENameOperatorVersion
rdocle3.9.4
rdocge3.10.0
rdocle3.12.0
rdocge3.13.0
rdoclt4.0