Red Hat Security AdvisoryRHSA-2014:0306
ruby193-rubygem-actionpack security update
Released 2014-03-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) ruby193-rubygem-actionpack-1:3.2.8-5.3.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-5.3.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) ruby193-rubygem-actionpack-1:3.2.8-5.3.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-5.3.el6
Fixes 2 records
Priority LOW 32
actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to ca…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06193 · Published 2014-02-20 · Partial fix · 3.2.17 CWE-20
Priority LOW 27
Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04032 · Published 2014-02-20 · Partial fix · 3.2.17, 4.0.3 CWE-79
