Description

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.

Remediation

References

CVE-2012-3465

Related Vulnerabilities

MySQL CVE-2020-14848 Vulnerability (CVE-2020-14848)

Drupal Core 7.x Open Redirect (7.0 - 7.69)

WordPress Plugin Shareaholic-share buttons, related posts, social analytics & more Cross-Site Request Forgery (7.0.3.3)

Jboss EAP CVE-2012-4529 Vulnerability (CVE-2012-4529)

Internet Information Services Other Vulnerability (CVE-2002-1182)

Severity

Medium

Classification

CVE-2012-3465 CWE-707

Tags

Missing Update Known Vulnerabilities