Description

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

Remediation

References

CVE-2009-3009

Related Vulnerabilities

Ampache Other Vulnerability (CVE-2006-5668)

MySQL CVE-2022-21279 Vulnerability (CVE-2022-21279)

Nginx Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)

WordPress Plugin VideoWhisper Video Conference Integration Arbitrary File Upload (4.91.8)

Oracle JRE CVE-2012-3213 Vulnerability (CVE-2012-3213)

Severity

Medium

Classification

CVE-2009-3009 CWE-707

Tags

Missing Update Known Vulnerabilities