Description

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Remediation

References

CVE-2013-0256

Related Vulnerabilities

WordPress Plugin Estatik Real Estate Cross-Site Request Forgery (3.8.3)

OpenVPN AS Other Vulnerability (CVE-2021-4234)

Drupal Improper Access Control Vulnerability (CVE-2016-3162)

WordPress Plugin Live Product Editor for WooCommerce Security Bypass (4.6.2)

WordPress Plugin Leaflet Maps Marker Pro (Google Maps, OpenStreetMap, Bing Maps) Multiple Cross-Site Scripting Vulnerabilities (2.3)

Severity

Medium

Classification

CVE-2013-0256 CWE-707

Tags

Missing Update Known Vulnerabilities