CVE-2013-1855

The CVE-2013-1855 entry concerns a cross-site scripting flaw in Rails’ Action Pack sanitize_css in lib/action_controller/vendor/html-scanner/html/sanitizer.rb. The issue arises from improper handling of newline characters in CSS token sequences, enabling remote XSS via crafted CSS. Affected Rails...

CVE-2014-0081

CVE-2014-0081 affects Ruby on Rails: multiple XSS flaws in actionview/lib/action_view/helpers/number_helper.rb allow remote injection via format, negative_format, or units in number_to_currency, number_to_percentage, and number_to_human. Affected Rails versions: 3.2.x before 3.2.17, 4.0.x before ...

CVE-2013-6415

CVE-2013-6415 is an XSS vulnerability in Ruby on Rails Action Pack, specifically in the number_to_currency helper (action_view number_helper.rb). It allows a remote attacker to inject arbitrary script/HTML via the unit parameter. Affected are Rails versions prior to 3.2.16 and 4.x prior to 4.0.2....

CVE-2012-2694

CVE-2012-2694 is a Ruby on Rails Active Record/parameter handling weakness where Rails versions 3.0.x before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 fail to align Active Record and Rack parameter handling, enabling remote attackers to bypass query restrictions and perform NULL checks v...

CVE-2012-3464

CVE-2012-3464 is a cross-site scripting (XSS) vulnerability in Rails where activesupport/lib/active_support/core_ext/string/output_safety.rb permits remote injection via a single quote character. Affected Rails versions are 3.0.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8. The impa...

CVE-2013-1857

CVE-2013-1857 affects Ruby on Rails: the sanitize helper in Action Pack (lib/action_controller/vendor/html-scanner/html/sanitizer.rb) fails to properly handle encoded colon characters in URLs, enabling remote attackers to perform cross-site scripting (XSS) via a crafted scheme name (for example i...

CVE-2014-7818

CVE-2014-7818 affects Ruby on Rails Action Pack, with a directory traversal in actionpack/lib/action_dispatch/middleware/static.rb when serve_static_assets is enabled. Affected: Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3. The underlying flaw all...

CVE-2012-3465

CVE-2012-3465 affects Ruby on Rails (Action Pack) via action_view/sanitize_helper.rb strip_tags. Vulnerable in Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8; malformed HTML markup can allow remote XSS via the strip_tags path. The issue is an XSS in the Rails sanitization flow an...

CVE-2015-7576

Ruby on Rails: The http_basic_authenticate_with path in Action Controller is vulnerable to a timing-attack bypass when verifying credentials, not using constant-time comparison. A remote attacker could determine valid usernames/passwords by measuring response times. Affected rails versions includ...

CVE-2011-2197

CVE-2011-2197 concerns Ruby on Rails XSS protection: the safe-buffer mutation handling in Rails’ XSS prevention can be bypassed, enabling remote XSS via crafted input. Affected: Rails 2.x before 2.3.12; Rails 3.0.x before 3.0.8; Rails 3.1.x before 3.1.0.rc2. Root cause per advisory: improper muta...

CVE-2013-4491

CVE-2013-4491 is a Cross-site scripting flaw in Ruby on Rails Action Pack’s i18n translation path. The vulnerability arises when an i18n fallback string includes user-controlled input, allowing remote script or HTML injection. Affected are Rails 3.x prior to 3.2.16 and 4.x prior to 4.0.2. Patches...

CVE-2012-1099

Concretely, CVE-2012-1099 affects Ruby on Rails ActionPack’s select helper in action_view/form_options_helper.rb. The vulnerability allows remote XSS via certain OPTION element generation in , impacting Rails 3.0.x (<3.0.12), 3.1.x (<3.1.4), and 3.2.x (

CVE-2011-2931

CVE-2011-2931 : Rails contains an XSS vulnerability in the strip_tags helper (actionpack/lib/action_controller/vendor/html-scanner/html/node.rb) that allows remote attackers to inject arbitrary script/HTML via a tag with an invalid name. Affected versions are Rails before 2.3.13, 3.0.x before 3.0...

CVE-2011-2932

CVE-2011-2932 is a cross-site scripting (XSS) vulnerability in Ruby on Rails’ activesupport core:_string/output_safety.rb, linked to a UTF-8 escaping issue. Affected versions include Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5. The issue enables remote injection of sc...

CVE-2009-4214

CVE-2009-4214 is an XSS vulnerability in Ruby on Rails via the strip_tags path. It affects Rails before 2.2.s and 2.3.x before 2.3.5, allowing remote attackers to inject arbitrary script/HTML using vectors involving non‑printing ASCII characters (related to HTML::Tokenizer and html/node.rb). Expl...

CVE-2015-3226

CVE-2015-3226 is an XSS vulnerability in Active Support's JSON encoding (ActiveSupport::JSON.encode) where a Hash with user-controlled data is mishandled during JSON encoding, potentially injecting script/HTML when inserted into HTML. Affected are Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2...

CVE-2012-3463

CVE-2012-3463 is a Cross-site Scripting (XSS) vulnerability in Ruby on Rails’ ActionView form helper. The flaw resides in actionpack/lib/action_view/helpers/form_tag_helper.rb, allowing remote attackers to inject arbitrary Web script or HTML via the prompt field to the select_tag helper. Affected...

CVE-2011-4319

CVE-2011-4319 is a cross-site scripting (XSS) vulnerability affecting the i18n translations helper in Ruby on Rails. The issue exists in Rails 3.0.x up to before 3.0.11 and Rails 3.1.x up to before 3.1.2, and in the rails_xss plugin for Rails 2.3.x. An attacker can trigger XSS by supplying a tran...

CVE-2012-1098

Ruby on Rails 3.0.x (pre-3.0.12), 3.1.x (pre-3.1.4), and 3.2.x (pre-3.2.2) are vulnerable to a cross-site scripting (XSS) weakness in SafeBuffer handling. The vulnerability allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object manipulated through...