Lucene search
+L

3 matches found

OSV
OSV
added 2017/10/24 6:33 p.m.48 views

GHSA-98MF-8F57-64QF actionpack Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formtaghelper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the selecttag helper...

4.3CVSS5.3AI score0.01306EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2012/12/04 7:24 p.m.7 views

rubygem-actionpack: potential XSS vulnerability in select_tag prompt

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formtaghelper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the selecttag helper...

4.3CVSS5.9AI score0.01306EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2012/08/10 10:0 a.m.41 views

CVE-2012-3463

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/formtaghelper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the selecttag helper...

5.4AI score0.01306EPSS
SaveExploits1References3
Rows per page
Query Builder