Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2009-3009
4.3
MEDIUMCVSS v2
Published
September 8, 2009
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.
rails
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.= 2.0.1, = 2.0.2, = 2.0.4, = 2.1.0, = 2.1.1, = 2.1.2, = 2.2.0, = 2.2.1, = 2.2.2, = 2.0.0, = 2.3.2, = 2.3.3NVD
rails/rails
GitHubRuby on Rails
GitHubRuby on Rails= 2.0.1, = 2.0.2, = 2.0.4, = 2.1.0, = 2.1.1, = 2.1.2, = 2.2.0, = 2.2.1, = 2.2.2, = 2.0.0, = 2.3.2, = 2.3.3NVD