NVD

Id
36611  
Name
CVE-2013-0256  
Description
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-03-01  
Modified Date
2013-06-04  
Seq
2013-0256  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187088 36611 CVE-2013-0256 http://blog.segment7.net/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2  View
187089 36611 CVE-2013-0256 SUSE-SU-2013:0647  View
187090 36611 CVE-2013-0256 openSUSE-SU-2013:0303  View
187091 36611 CVE-2013-0256 RHSA-2013:0548  View
187092 36611 CVE-2013-0256 RHSA-2013:0686  View
187093 36611 CVE-2013-0256 RHSA-2013:0701  View
187094 36611 CVE-2013-0256 RHSA-2013:0728  View
187095 36611 CVE-2013-0256 http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/  View
187096 36611 CVE-2013-0256 USN-1733-1  View
187097 36611 CVE-2013-0256 https://bugzilla.redhat.com/show_bug.cgi?id=907820  View
187098 36611 CVE-2013-0256 https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20149 JVNDB-2013-001724 Ruby で使用される RDoc の darkfish.js におけるクロスサイトスクリプティングの脆弱性 Ruby で使用される RDoc の darkfish.js は、適切にドキュメントを作成しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2013-0256 60198 CVE-2013-0256 36611 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001724.html 2013-02-06 2013-06-12 View