NVD

Id
41474  
Name
CVE-2013-6416  
Description
Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-12-06  
Modified Date
2016-12-30  
Seq
2013-6416  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209546 41474 CVE-2013-6416 http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/  View
209547 41474 CVE-2013-6416 64071  View
209548 41474 CVE-2013-6416 [ruby-security-ann] 20131203 [CVE-2013-6416] XSS Vulnerability in simple_format helper  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23795 JVNDB-2013-005370 Ruby on Rails の actionpack/lib/action_view/helpers/text_helper.rb におけるクロスサイトスクリプティングの脆弱性 Ruby on Rails の actionpack/lib/action_view/helpers/text_helper.rb の simple_format ヘルパーには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-6416 66358 CVE-2013-6416 41474 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005370.html 2013-12-03 2013-12-10 View