Lucene search

K
rubygemsRubySecRUBY:RUBY-2010-0541-65556
HistoryJun 14, 2010 - 8:00 p.m.

CVE-2010-0541 Ruby WEBrick javascript injection flaw

2010-06-1420:00:00
RubySec
rubysec.com
11

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server
in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows
remote attackers to inject arbitrary web script or HTML via a
crafted URI that triggers a UTF-7 error page.