Lucene search

K
rubygemsRubySecRUBY:REDCLOTH-2012-6684-115941
HistoryFeb 28, 2012 - 8:00 p.m.

CVE-2012-6684 rubygem-RedCloth: XSS vulnerability

2012-02-2820:00:00
RubySec
rubysec.com
9

Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9
for Ruby and earlier allows remote attackers to inject arbitrary
web script or HTML via a javascript: URI.

CPENameOperatorVersion
redclothlt4.3.0