Lucene search
Ubuntu.comUB:CVE-2009-4214HistoryDec 07, 2009 - 12:00 a.m.
CVE-2009-4214
2009-12-0700:00:00
ubuntu.com
ubuntu.com
15
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.4%
Cross-site scripting (XSS) vulnerability in the strip_tags function in Ruby
on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to
inject arbitrary web script or HTML via vectors involving non-printing
ASCII characters, related to HTML::Tokenizer and
actionpack/lib/action_controller/vendor/html-scanner/html/node.rb.
Related
nessus
nessus
Fedora 10 : rubygem-actionpack-2.1.1-5.fc10 (2009-12966)
2009-12-10 00:00:00
Fedora 11 : rubygem-actionpack-2.3.2-4.fc11 (2009-13361)
2009-12-18 00:00:00
Fedora 12 : rubygem-actionpack-2.3.4-3.fc12 (2009-13393)
2009-12-18 00:00:00
openvas
openvas
Ruby on Rails 'strip_tags' Cross Site Scripting Vulnerability
2009-12-09 00:00:00
Fedora Core 12 FEDORA-2009-13393 (rubygem-actionpack)
2009-12-30 00:00:00
Fedora Core 12 FEDORA-2009-13393 (rubygem-actionpack)
2009-12-30 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: rubygem-actionpack-2.3.4-3.fc12
2009-12-18 04:46:05
[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.2-4.fc11
2009-12-18 04:36:01
[SECURITY] Fedora 10 Update: rubygem-actionpack-2.1.1-5.fc10
2009-12-10 04:12:27
debiancve
debiancve
CVE-2009-4214
2009-12-07 17:30:00
cve
cve
CVE-2009-4214
2009-12-07 17:30:00
CVE-2009-4132
2009-12-12 02:30:00
github
github
Moderate severity vulnerability that affects rails
2017-10-24 18:33:38
prion
prion
Cross site scripting
2009-12-07 17:30:00
osv
osv
Moderate severity vulnerability that affects rails
2017-10-24 18:33:38
rails - several
2011-06-14 00:00:00
rails - several
2012-01-23 00:00:00
debian
debian
[SECURITY] [DSA 2259-1] rails security update
2011-06-14 18:57:49
[SECURITY] [DSA 2301-1] rails security update
2011-09-05 20:25:54
[SECURITY] [DSA 2301-2] rails regression
2012-01-23 18:35:53
securityvulns
securityvulns
[SECURITY] [DSA 2301-1] rails security update
2011-09-09 00:00:00
gentoo
gentoo
Ruby on Rails: Multiple vulnerabilities
2009-12-20 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.4%
Related for UB:CVE-2009-4214