Description

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Remediation

References

CVE-2013-0256

Related Vulnerabilities

Nexus Repository Manager Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-16530)

Oracle JRE CVE-2014-0458 Vulnerability (CVE-2014-0458)

WordPress Plugin WordPress Alipay/Tenpay/PayPal SQL Injection (3.7.2)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-42627)

Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-23327)

Severity

Medium

Classification

CVE-2013-0256 CWE-707

Tags

Missing Update Known Vulnerabilities