Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-1099
4.3
MEDIUMCVSS v2
Published
March 13, 2012
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain generation of OPTION elements within SELECT elements.
rails
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.= 3.0.0, = 3.0.1, = 3.0.2, = 3.0.6, = 3.0.7, = 3.0.4, = 3.0.10, = 3.0.8, = 3.0.5, = 3.0.12, = 3.0.3, = 3.0.11, = 3.0.9, = 3.1.0, = 3.1.1, = 3.1.2, = 3.1.3, = 3.1.4, = 3.2.0, = 3.2.1, = 3.2.2NVD
rails/rails
GitHubRuby on Rails
GitHubRuby on Rails= 3.0.0, = 3.0.1, = 3.0.2, = 3.0.6, = 3.0.7, = 3.0.4, = 3.0.10, = 3.0.8, = 3.0.5, = 3.0.12, = 3.0.3, = 3.0.11, = 3.0.9, = 3.1.0, = 3.1.1, = 3.1.2, = 3.1.3, = 3.1.4, = 3.2.0, = 3.2.1, = 3.2.2NVD