Read the docs
TI-2013-01638 Aliases CVE-2013-1855GHSA-q759-hwvc-m3jg

The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in…

Priority LOW 25CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
Partial Red Hat: 3 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.

Summary

The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.

Why it matters now

EPSS 0.0263 85th percentileScored 2026-11-07
Fix Partial actionpack (RubyGems): 2.3.18, 3.1.12, 3.2.13Red Hat: 2 advisoriesRed Hat: 3 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—actionpack (RubyGems)before 2.3.182.3.18Patch availableGHSA-q759-hwvc-m3jg
—actionpack (RubyGems)3.0.0 to before 3.1.123.1.12Patch availableGHSA-q759-hwvc-m3jg
—actionpack (RubyGems)3.2.0 to before 3.2.133.2.13Patch availableGHSA-q759-hwvc-m3jg
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • actionpack (RubyGems) Vendor— Affected before 2.3.18 Fixed in 2.3.18 Patch available GHSA-q759-hwvc-m3jg
  • actionpack (RubyGems) Vendor— Affected 3.0.0 to before 3.1.12 Fixed in 3.1.12 Patch available GHSA-q759-hwvc-m3jg
  • actionpack (RubyGems) Vendor— Affected 3.2.0 to before 3.2.13 Fixed in 3.2.13 Patch available GHSA-q759-hwvc-m3jg

CPE configurations NVD · 163

CPEVersionsRoleVendor
cpe:2.3:a:rubyonrails:rails:3.2.0:*:*:*:*:*:*:*3.2.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*3.2.0 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*3.2.0 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.2:*:*:*:*:*:*:*3.2.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*3.2.2 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.3:*:*:*:*:*:*:*3.2.3VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*3.2.3 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*3.2.3 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.4:*:*:*:*:*:*:*3.2.4VulnerableRails
  • cpe:2.3:a:rubyonrails:rails:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:* Versions 3.2.0 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:* Versions 3.2.0 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:* Versions 3.2.2 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:* Versions 3.2.3 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:* Versions 3.2.3 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·Rails
Show 153 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*3.2.4 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*3.2.5VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*3.2.6VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.7:*:*:*:*:*:*:*3.2.7VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.8:*:*:*:*:*:*:*3.2.8VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.9:*:*:*:*:*:*:*3.2.9VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*3.2.10VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*3.2.11VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.2.12:*:*:*:*:*:*:*3.2.12VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.9.1:*:*:*:*:*:*:*0.9.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.9.2:*:*:*:*:*:*:*0.9.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.9.3:*:*:*:*:*:*:*0.9.3VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.9.4:*:*:*:*:*:*:*0.9.4VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.9.4.1:*:*:*:*:*:*:*0.9.4.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.10.0:*:*:*:*:*:*:*0.10.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.10.1:*:*:*:*:*:*:*0.10.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.11.0:*:*:*:*:*:*:*0.11.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.11.1:*:*:*:*:*:*:*0.11.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.12.0:*:*:*:*:*:*:*0.12.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.12.1:*:*:*:*:*:*:*0.12.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.13.0:*:*:*:*:*:*:*0.13.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.13.1:*:*:*:*:*:*:*0.13.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.14.1:*:*:*:*:*:*:*0.14.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.14.2:*:*:*:*:*:*:*0.14.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.14.3:*:*:*:*:*:*:*0.14.3VulnerableRails
cpe:2.3:a:rubyonrails:rails:0.14.4:*:*:*:*:*:*:*0.14.4VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:*1.1.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:*1.1.3VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.1.4:*:*:*:*:*:*:*1.1.4VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.1.5:*:*:*:*:*:*:*1.1.5VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.1.6:*:*:*:*:*:*:*1.1.6VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.2.3:*:*:*:*:*:*:*1.2.3VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.2.4:*:*:*:*:*:*:*1.2.4VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.2.5:*:*:*:*:*:*:*1.2.5VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.2.6:*:*:*:*:*:*:*1.2.6VulnerableRails
cpe:2.3:a:rubyonrails:rails:1.9.5:*:*:*:*:*:*:*1.9.5VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:*2.0.0 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:*2.0.0 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*2.1.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*2.1.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:*2.1.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:*2.2.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.2.2:*:*:*:*:*:*:*2.2.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*2.3.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*2.3.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*2.3.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*2.3.3VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*2.3.4VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*2.3.9VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*2.3.10VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*2.3.11VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*2.3.12VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*2.3.13VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*2.3.14VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*2.3.15VulnerableRails
cpe:2.3:a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*2.3.16VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*up to 2.3.17VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.0:*:*:*:*:*:*:*0.5.0VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.5:*:*:*:*:*:*:*0.5.5VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.6:*:*:*:*:*:*:*0.5.6VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.7:*:*:*:*:*:*:*0.5.7VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.0:*:*:*:*:*:*:*0.6.0VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.5:*:*:*:*:*:*:*0.6.5VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.7.0:*:*:*:*:*:*:*0.7.0VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.0:*:*:*:*:*:*:*0.8.0VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.5:*:*:*:*:*:*:*0.8.5VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.0:*:*:*:*:*:*:*0.9.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*3.0.0 betaVulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*3.0.0 beta2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*3.0.0 beta3VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*3.0.0 beta4VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*3.0.0 rcVulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*3.0.0 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*3.0.1 preVulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*3.0.2 preVulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*3.0.4 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.5:*:*:*:*:*:*:*3.0.5VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*3.0.5 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.6:*:*:*:*:*:*:*3.0.6VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*3.0.6 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*3.0.6 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.7:*:*:*:*:*:*:*3.0.7VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*3.0.7 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*3.0.7 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.8:*:*:*:*:*:*:*3.0.8VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*3.0.8 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*3.0.8 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*3.0.8 rc3VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*3.0.8 rc4VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.9:*:*:*:*:*:*:*3.0.9VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*3.0.9 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*3.0.9 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*3.0.9 rc3VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*3.0.9 rc4VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*3.0.9 rc5VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.10:*:*:*:*:*:*:*3.0.10VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*3.0.10 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*3.0.11VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.12:*:*:*:*:*:*:*3.0.12VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*3.0.12 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.13:*:*:*:*:*:*:*3.0.13VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*3.0.13 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*3.0.14VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*3.0.16VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*3.0.17VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*3.0.18VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*3.0.19VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*3.0.20VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.4:*:*:*:*:*:*:*3.0.4VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:*:*:*:*:*:*:*3.1.0VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*3.1.0 beta1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*3.1.0 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*3.1.0 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*3.1.0 rc3VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*3.1.0 rc4VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*3.1.0 rc5VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*3.1.0 rc6VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*3.1.0 rc7VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*3.1.0 rc8VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*3.1.1 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*3.1.1 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*3.1.1 rc3VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*3.1.2 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*3.1.2 rc2VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*3.1.3VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.4:*:*:*:*:*:*:*3.1.4VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*3.1.4 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.5:*:*:*:*:*:*:*3.1.5VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*3.1.5 rc1VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*3.1.6VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*3.1.7VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*3.1.8VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*3.1.9VulnerableRails
cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*3.1.10VulnerableRails
cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.11:*:*:*:*:*:*:*3.1.11VulnerableRails
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
  • cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:* Versions 3.2.4 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.7:*:*:*:*:*:*:* Versions 3.2.7 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.8:*:*:*:*:*:*:* Versions 3.2.8 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.9:*:*:*:*:*:*:* Versions 3.2.9 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:* Versions 3.2.10 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:* Versions 3.2.11 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.2.12:*:*:*:*:*:*:* Versions 3.2.12 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.9.1:*:*:*:*:*:*:* Versions 0.9.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.9.2:*:*:*:*:*:*:* Versions 0.9.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.9.3:*:*:*:*:*:*:* Versions 0.9.3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.9.4:*:*:*:*:*:*:* Versions 0.9.4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.9.4.1:*:*:*:*:*:*:* Versions 0.9.4.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.10.0:*:*:*:*:*:*:* Versions 0.10.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.10.1:*:*:*:*:*:*:* Versions 0.10.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.11.0:*:*:*:*:*:*:* Versions 0.11.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.11.1:*:*:*:*:*:*:* Versions 0.11.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.12.0:*:*:*:*:*:*:* Versions 0.12.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.12.1:*:*:*:*:*:*:* Versions 0.12.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.13.0:*:*:*:*:*:*:* Versions 0.13.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.13.1:*:*:*:*:*:*:* Versions 0.13.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.14.1:*:*:*:*:*:*:* Versions 0.14.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.14.2:*:*:*:*:*:*:* Versions 0.14.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.14.3:*:*:*:*:*:*:* Versions 0.14.3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:0.14.4:*:*:*:*:*:*:* Versions 0.14.4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.1.5:*:*:*:*:*:*:* Versions 1.1.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.1.6:*:*:*:*:*:*:* Versions 1.1.6 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:1.9.5:*:*:*:*:*:*:* Versions 1.9.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:* Versions 2.0.0 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:* Versions 2.0.0 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:* Versions 2.3.3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:* Versions 2.3.4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:* Versions 2.3.9 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:* Versions 2.3.10 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:* Versions 2.3.11 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:* Versions 2.3.12 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:* Versions 2.3.13 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:* Versions 2.3.14 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:* Versions 2.3.15 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:* Versions 2.3.16 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:* Versions up to 2.3.17 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.0:*:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.5:*:*:*:*:*:*:* Versions 0.5.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.6:*:*:*:*:*:*:* Versions 0.5.6 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.7:*:*:*:*:*:*:* Versions 0.5.7 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.0:*:*:*:*:*:*:* Versions 0.6.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.5:*:*:*:*:*:*:* Versions 0.6.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.0:*:*:*:*:*:*:* Versions 0.8.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.5:*:*:*:*:*:*:* Versions 0.8.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.0:*:*:*:*:*:*:* Versions 0.9.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:* Versions 3.0.0 beta Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:* Versions 3.0.0 beta2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:* Versions 3.0.0 beta3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:* Versions 3.0.0 beta4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:* Versions 3.0.0 rc Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:* Versions 3.0.0 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:* Versions 3.0.1 pre Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:* Versions 3.0.2 pre Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:* Versions 3.0.4 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:* Versions 3.0.5 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.6:*:*:*:*:*:*:* Versions 3.0.6 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:* Versions 3.0.6 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:* Versions 3.0.6 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.7:*:*:*:*:*:*:* Versions 3.0.7 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:* Versions 3.0.7 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:* Versions 3.0.7 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.8:*:*:*:*:*:*:* Versions 3.0.8 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:* Versions 3.0.8 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:* Versions 3.0.8 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:* Versions 3.0.8 rc3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:* Versions 3.0.8 rc4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.9:*:*:*:*:*:*:* Versions 3.0.9 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:* Versions 3.0.9 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:* Versions 3.0.9 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:* Versions 3.0.9 rc3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:* Versions 3.0.9 rc4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:* Versions 3.0.9 rc5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.10:*:*:*:*:*:*:* Versions 3.0.10 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:* Versions 3.0.10 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:* Versions 3.0.11 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.12:*:*:*:*:*:*:* Versions 3.0.12 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:* Versions 3.0.12 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.13:*:*:*:*:*:*:* Versions 3.0.13 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:* Versions 3.0.13 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:* Versions 3.0.14 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:* Versions 3.0.16 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:* Versions 3.0.17 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:* Versions 3.0.18 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:* Versions 3.0.19 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:* Versions 3.0.20 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:* Versions 3.1.0 beta1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:* Versions 3.1.0 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:* Versions 3.1.0 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:* Versions 3.1.0 rc3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:* Versions 3.1.0 rc4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:* Versions 3.1.0 rc5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:* Versions 3.1.0 rc6 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:* Versions 3.1.0 rc7 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:* Versions 3.1.0 rc8 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:* Versions 3.1.1 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:* Versions 3.1.1 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:* Versions 3.1.1 rc3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:* Versions 3.1.2 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:* Versions 3.1.2 rc2 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:* Versions 3.1.3 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.4:*:*:*:*:*:*:* Versions 3.1.4 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:* Versions 3.1.4 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.5:*:*:*:*:*:*:* Versions 3.1.5 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:* Versions 3.1.5 rc1 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:* Versions 3.1.6 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:* Versions 3.1.7 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:* Versions 3.1.8 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:* Versions 3.1.9 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:* Versions 3.1.10 Vulnerable ·Rails
  • cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.11:*:*:*:*:*:*:* Versions 3.1.11 Vulnerable ·Rails
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat

Remediation

  • Fix · GHSA-q759-hwvc-m3jg actionpack (RubyGems) Fixed in 2.3.18 Advisory →
  • Fix · GHSA-q759-hwvc-m3jg actionpack (RubyGems) Fixed in 3.1.12 Advisory →
  • Fix · GHSA-q759-hwvc-m3jg actionpack (RubyGems) Fixed in 3.2.13 Advisory →

Red Hat 2 advisories

  • RHSA-2014:1863 Released 2014-11-17 · Red Hat rating Important
    Subscription Asset Manager 1.4 security update
    • Red Hat Subscription Asset Manager for RHEL 6 Server katello-1.4.3.28-1.el6sam_splice, katello-common-1.4.3.28-1.el6sam_splice, katello-glue-candlepin-1.4.3.28-1.el6sam_splice +14
  • RHSA-2013:0698 Released 2013-04-02 · Red Hat rating Moderate
    rubygem-actionpack and ruby193-rubygem-actionpack security update
    • Red Hat OpenShift Enterprise Infrastructure ruby193-rubygem-actionpack-1:3.2.8-5.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-5.el6, rubygem-actionpack-1:3.0.13-8.el6op
    • Red Hat OpenShift Enterprise Node ruby193-rubygem-actionpack-1:3.2.8-5.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-5.el6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Satellite 6AffectedNo fix yet
Red Hat OpenShift Enterprise InfrastructureFixed RHSA-2013:0698
Red Hat OpenShift Enterprise NodeFixed RHSA-2013:0698
Red Hat Subscription Asset Manager for RHEL 6 ServerFixed RHSA-2014:1863

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1855
  2. 2026-10-03 Alias added: GHSA-q759-hwvc-m3jg

References

Advisory 8

Other 11

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences