DEBIAN-CVE-2010-1330

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

CVE-2010-1330

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

PT-2012-1298

Name of the Vulnerable Software and Affected Versions JRuby versions prior to 1.4.1 Description The issue is related to the regular expression engine in JRuby. When $KCODE is set to 'u', it does not properly handle characters immediately after a UTF-8 character. This allows remote attackers to...