Lucene search
Ubuntu.comUB:CVE-2016-6316HistorySep 07, 2016 - 12:00 a.m.
CVE-2016-6316
2016-09-0700:00:00
ubuntu.com
ubuntu.com
18
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.007
Percentile
80.6%
Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails
3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow
remote attackers to inject arbitrary web script or HTML via text declared
as “HTML safe” and used as attribute values in tag handlers.
Bugs
Notes
| Author | Note |
|---|---|
| seth-arnold | In Oneiric-Saucy, rails package is just for transition; The rails package contains actual code from vivid onward |
| mdeslaur | The GnuPG project used this CVE number by mistake when doing an announcement. The GnuPG issue is actually CVE-2016-6313. |
Related
openvas
openvas
Debian: Security Advisory (DSA-3651-1)
2016-08-24 00:00:00
Fedora Update for rubygem-actionview FEDORA-2016-0d9890f7b5
2016-08-27 00:00:00
Ruby on Rails Action View Cross Site Scripting Vulnerability - Windows
2016-10-13 00:00:00
debiancve
debiancve
CVE-2016-6316
2016-09-07 19:28:10
CVE-2016-6313
2016-12-13 20:59:04
redhat
redhat
(RHSA-2016:1858) Moderate: ruby193-rubygem-actionpack security update
2016-09-13 09:51:35
(RHSA-2016:1857) Moderate: ror40-rubygem-actionpack security update
2016-09-13 09:51:16
(RHSA-2016:1856) Moderate: rh-ror41-rubygem-actionview security update
2016-09-13 09:50:58
fedora
fedora
[SECURITY] Fedora 23 Update: rubygem-actionview-4.2.3-6.fc23
2016-08-26 12:50:04
[SECURITY] Fedora 24 Update: rubygem-actionview-4.2.5.2-3.fc24
2016-08-26 10:24:48
[SECURITY] Fedora 23 Update: gnupg-1.4.21-1.fc23
2016-09-14 01:23:53
freebsd
freebsd
nessus
nessus
FreeBSD : Rails 4 -- Possible XSS Vulnerability in Action View (43f1c867-654a-11e6-8286-00248c0c745d)
2016-10-17 00:00:00
Debian DSA-3651-1 : rails - security update
2016-08-26 00:00:00
Fedora 23 : rubygem-actionview (2016-ab8bf51cf3)
2016-08-29 00:00:00
debian
debian
[SECURITY] [DSA 3651-1] rails security update
2016-08-25 16:20:10
[SECURITY] [DSA 3651-1] rails security update
2016-08-25 16:20:10
[SECURITY] [DLA 600-1] libgcrypt11 security update
2016-08-23 19:52:26
cve
cve
CVE-2016-6316
2016-09-07 19:28:10
CVE-2016-6313
2016-12-13 20:59:04
github
github
actionview Cross-site Scripting vulnerability
2017-10-24 18:33:35
threatpost
threatpost
GPG Patches 18-Year-Old Libgcrypt RNG Bug
2016-08-18 12:39:21
osv
osv
actionview Cross-site Scripting vulnerability
2017-10-24 18:33:35
rails - security update
2016-08-25 00:00:00
gnupg - security update
2016-08-17 00:00:00
cvelist
cvelist
CVE-2016-6316
2016-09-07 19:00:00
CVE-2016-6313
2016-12-13 20:00:00
nvd
nvd
CVE-2016-6316
2016-09-07 19:28:10
CVE-2016-6313
2016-12-13 20:59:04
rubygems
rubygems
Possible XSS Vulnerability in Action View
2016-08-10 21:00:00
Possible XSS Vulnerability in Action View
2016-08-10 21:00:00
prion
prion
Cross site scripting
2016-09-07 19:28:00
Design/Logic Flaw
2016-12-13 20:59:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-01-15 09:13:09
Information Leakage
2019-01-15 09:14:36
redhatcve
redhatcve
CVE-2016-6316
2016-08-12 06:18:33
CVE-2016-6313
2016-08-18 21:04:33
gitlab
gitlab
Possible XSS Vulnerability
2016-09-07 00:00:00
ibm
ibm
Security Bulletin: IBM Flex System Manager (FSM) is affected by a libgcrypt vulnerability (CVE-2016-6313)
2018-06-18 01:34:54
Security Bulletin: Vulnerability in libgcrypt affects SmartCloud Entry (CVE-2016-6313 )
2020-07-19 00:49:12
Security Bulletin: A vulnerability in GnuPG (gpg) affects PowerKVM
2018-06-18 01:34:46
alpinelinux
alpinelinux
CVE-2016-6313
2016-12-13 20:59:04
slackware
slackware
[slackware-security] gnupg
2016-08-23 20:58:51
[slackware-security] libgcrypt
2016-08-23 21:12:28
archlinux
archlinux
libgcrypt: information disclosure
2016-08-21 00:00:00
lib32-libgcrypt: information disclosure
2016-09-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package gnupg version 1.4.21-alt1
2017-03-28 00:00:00
gentoo
gentoo
GnuPG: RNG output is predictable
2016-12-02 00:00:00
libgcrypt: Multiple vulnerabilities
2016-10-10 00:00:00
ubuntu
ubuntu
Libgcrypt vulnerability
2016-08-18 00:00:00
GnuPG vulnerability
2016-08-18 00:00:00
oraclelinux
oraclelinux
libgcrypt security update
2016-11-09 00:00:00
cloudfoundry
cloudfoundry
USN-3065-1 Libgcrypt vulnerability | Cloud Foundry
2016-08-25 00:00:00
USN-3064-1 GnuPG vulnerability | Cloud Foundry
2016-08-25 00:00:00
ubuntucve
ubuntucve
CVE-2016-6313
2016-08-17 00:00:00
centos
centos
libgcrypt security update
2016-11-12 06:30:21
amazon
amazon
Medium: libgcrypt, gnupg
2016-09-15 19:00:00
mageia
mageia
Updated gnupg/libgcrypt packages fix security vulnerability
2016-08-31 18:32:33
f5
f5
K09040132 : libgcrypt vulnerability CVE-2016-6313
2017-07-03 00:00:00
photon
photon
suse
suse
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.007
Percentile
80.6%
Related for UB:CVE-2016-6316