NVD

Id
29021  
Name
CVE-2014-0081  
Description
Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-02-20  
Modified Date
2016-11-17  
Seq
2014-0081  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153145 29021 CVE-2014-0081 openSUSE-SU-2014:0295  View
153146 29021 CVE-2014-0081 [oss-security] 20140218 XSS Vulnerability in number_to_currency, number_to_percentage and number_to_human (CVE-2014-0081)  View
153147 29021 CVE-2014-0081 RHSA-2014:0215  View
153148 29021 CVE-2014-0081 RHSA-2014:0306  View
153149 29021 CVE-2014-0081 65647  View
153150 29021 CVE-2014-0081 1029782  View
153151 29021 CVE-2014-0081 [rubyonrails-security] 20140218 XSS Vulnerability in number_to_currency, number_to_percentage and number_to_human (CVE-2014-0081)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12563 JVNDB-2014-001438 Ruby on Rails の actionview/lib/action_view/helpers/number_helper.rb におけるクロスサイトスクリプティングの脆弱性 Ruby on Rails の actionview/lib/action_view/helpers/number_helper.rb には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-0081 67482 CVE-2014-0081 29021 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001438.html 2014-02-18 2014-04-08 View