openSUSE Security Update : rubygem-RedCloth (openSUSE-2015-457)

rubygem-RedCloth was updated to fix one security issue. The following vulnerability was fixed : CVE-2012-6684: A cross-site scripting XSS vulnerability allowed remote attackers to inject arbitrary web script or HTML via a javascript: URI boo912212 %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DLA 167-1] redcloth security update

Package : redcloth Version : 4.2.2-1.1+deb6u1 CVE ID : CVE-2012-6684 Debian Bug : 774748 Kousuke Ebihara discovered that redcloth, a Ruby module used to convert Textile markup to HTML, did not properly sanitize its input. This allowed a remote attacker to perform a cross-site scripting attack by...

[SECURITY] [DSA 3168-1] ruby-redcloth security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3168-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 22, 2015 http://www.debian.org/security/faq -...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684

CVE-2012-6684 affects the RedCloth Ruby library (versions up to 4.2.9). The vulnerability arises because input is not properly sanitized, allowing a remote attacker to inject arbitrary JavaScript via a javascript: URI in Textile-to-HTML output, resulting in cross-site scripting (XSS). Public disc...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684 rubygem-RedCloth: XSS vulnerability

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...