Lucene search
RootSSV:61281HistoryJan 06, 2014 - 12:00 a.m.
Ruby will_paginate Gem跨站脚本漏洞
2014-01-0600:00:00
Root
www.seebug.org
13
0.002 Low
EPSS
Percentile
60.0%
CVE ID:CVE-2013-6459
Ruby是跨平台、面向对象的动态类型编程语言。will_paginate是一个分页插件，提供将搜索结果进行分页显示的功能。
will_paginate gem for Ruby存在跨站脚本漏洞。远程攻击者可通过与生成的分页链接相关的输入利用该漏洞注入任意Web脚本或HTML。
0
will_paginate gem for Ruby 3.x
厂商补丁：
Ruby
厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：
Related
nessus
nessus
Fedora 20 : rubygem-will_paginate-3.0.4-5.fc20 (2014-0066)
2014-01-21 00:00:00
Fedora 19 : rubygem-will_paginate-3.0.4-5.fc19 (2014-0094)
2014-01-21 00:00:00
RHEL 7 : Satellite Server (RHSA-2018:0336)
2018-02-28 00:00:00
veracode
veracode
Cross-site Scripting (XSS) Through Generated Pagination Links
2019-01-15 09:21:53
fedora
fedora
[SECURITY] Fedora 19 Update: rubygem-will_paginate-3.0.4-5.fc19
2014-01-21 05:52:47
[SECURITY] Fedora 20 Update: rubygem-will_paginate-3.0.4-5.fc20
2014-01-21 05:55:12
ubuntucve
ubuntucve
CVE-2013-6459
2013-12-31 00:00:00
osv
osv
will_paginate Cross-site Scripting vulnerability
2017-10-24 18:33:36
debiancve
debiancve
CVE-2013-6459
2013-12-31 16:04:00
prion
prion
Cross site scripting
2013-12-31 16:04:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0054)
2022-01-28 00:00:00
cve
cve
CVE-2013-6459
2013-12-31 16:04:00
github
github
will_paginate Cross-site Scripting vulnerability
2017-10-24 18:33:36
mageia
mageia
Updated ruby-will_paginate package fixes CVE-2013-6459
2014-02-12 02:37:02
rubygems
rubygems
CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities
2013-09-18 20:00:00
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34