Red Hat Security AdvisoryRHSA-2013:0728
rubygem packages security update
Released 2013-04-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Enterprise Infrastructure ruby193-rubygem-activesupport-1:3.2.8-4.el6, ruby193-rubygem-bcrypt-ruby-3.0.1-7.el6, ruby193-rubygem-bson-1.5.2-6.el6op +11
- Red Hat OpenShift Enterprise Node ruby193-rubygem-activesupport-1:3.2.8-4.el6, ruby193-rubygem-bcrypt-ruby-3.0.1-7.el6, ruby193-rubygem-bson-1.5.2-6.el6op +7
Fixes 1 record
Priority LOW 26
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02992 · Published 2013-03-01 · Partial fix · 3.12.1 CWE-79
