Fedora 17 : rubygem-rdoc-3.12-5.fc17 (2013-2143)

Patch cross site scripting vulnerability CVE-2013-0256 rhbz908358. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 18 : rubygem-rdoc-3.12-6.fc18 (2013-2131)

Patch cross site scripting vulnerability CVE-2013-0256 rhbz908358. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted URL...