Red Hat Security AdvisoryRHSA-2013:0701
ruby193-ruby, rubygem-json and rubygem-rdoc security update
Released 2013-04-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Enterprise Infrastructure ruby193-ruby-1.9.3.327-28.el6, ruby193-ruby-devel-1.9.3.327-28.el6, ruby193-ruby-doc-1.9.3.327-28.el6 +15
- Red Hat OpenShift Enterprise Node ruby193-ruby-1.9.3.327-28.el6, ruby193-ruby-devel-1.9.3.327-28.el6, ruby193-ruby-doc-1.9.3.327-28.el6 +13
Fixes 2 records
Priority MEDIUM 48
The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.13911 · Published 2013-02-13 · Partial fix · 1.5.5, 1.6.8 +1 CWE-20
Priority LOW 26
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02992 · Published 2013-03-01 · Partial fix · 3.12.1 CWE-79
