NVD

Id
45058  
Name
CVE-2012-3465  
Description
Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-08-10  
Modified Date
2013-04-10  
Seq
2012-3465  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225936 45058 CVE-2012-3465 RHSA-2013:0154  View
225937 45058 CVE-2012-3465 http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/  View
225938 45058 CVE-2012-3465 [rubyonrails-security] 20120810 XSS Vulnerability in strip_tags  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27824 JVNDB-2012-003531 Ruby on Rails の strip_tags ヘルパーにおけるクロスサイトスクリプティングの脆弱性 Ruby on Rails の strip_tags ヘルパーの actionpack/lib/action_view/helpers/sanitize_helper.rb には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3465 56703 CVE-2012-3465 45058 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003531.html 2012-08-09 2016-02-10 View