CVE-2012-3465

EPSS 1.98%
Veröffentlicht 10.08.2012 10:34:47
Zuletzt bearbeitet 16.06.2026 23:43:16
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 142 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rubyonrails ≫ Rails Version 0.9.1

Rubyonrails ≫ Rails Version 0.9.2

Rubyonrails ≫ Rails Version 0.9.3

Rubyonrails ≫ Rails Version 0.9.4

Rubyonrails ≫ Rails Version 0.9.4.1

Rubyonrails ≫ Rails Version 0.10.0

Rubyonrails ≫ Rails Version 0.10.1

Rubyonrails ≫ Rails Version 0.11.0

Rubyonrails ≫ Rails Version 0.11.1

Rubyonrails ≫ Rails Version 0.12.0

Rubyonrails ≫ Rails Version 0.12.1

Rubyonrails ≫ Rails Version 0.13.0

Rubyonrails ≫ Rails Version 0.13.1

Rubyonrails ≫ Rails Version 0.14.1

Rubyonrails ≫ Rails Version 0.14.2

Rubyonrails ≫ Rails Version 0.14.3

Rubyonrails ≫ Rails Version 0.14.4

Rubyonrails ≫ Rails Version 1.0.0

Rubyonrails ≫ Rails Version 1.1.0

Rubyonrails ≫ Rails Version 1.1.1

Rubyonrails ≫ Rails Version 1.1.2

Rubyonrails ≫ Rails Version 1.1.3

Rubyonrails ≫ Rails Version 1.1.4

Rubyonrails ≫ Rails Version 1.1.5

Rubyonrails ≫ Rails Version 1.1.6

Rubyonrails ≫ Rails Version 1.2.0

Rubyonrails ≫ Rails Version 1.2.1

Rubyonrails ≫ Rails Version 1.2.2

Rubyonrails ≫ Rails Version 1.2.3

Rubyonrails ≫ Rails Version 1.2.4

Rubyonrails ≫ Rails Version 1.2.5

Rubyonrails ≫ Rails Version 1.2.6

Rubyonrails ≫ Rails Version 1.9.5

Rubyonrails ≫ Rails Version 2.0.0

Rubyonrails ≫ Rails Version 2.0.0 Update rc1

Rubyonrails ≫ Rails Version 2.0.0 Update rc2

Rubyonrails ≫ Rails Version 2.0.1

Rubyonrails ≫ Rails Version 2.0.2

Rubyonrails ≫ Rails Version 2.0.4

Rubyonrails ≫ Rails Version 2.1.0

Rubyonrails ≫ Rails Version 2.1.1

Rubyonrails ≫ Rails Version 2.1.2

Rubyonrails ≫ Rails Version 2.2.0

Rubyonrails ≫ Rails Version 2.2.1

Rubyonrails ≫ Rails Version 2.2.2

Rubyonrails ≫ Rails Version 2.3.2

Rubyonrails ≫ Rails Version 2.3.3

Rubyonrails ≫ Rails Version 2.3.4

Rubyonrails ≫ Rails Version 2.3.9

Rubyonrails ≫ Rails Version 2.3.10

Rubyonrails ≫ Rails Version 2.3.11

Rubyonrails ≫ Rails Version 2.3.12

Rubyonrails ≫ Rails Version 3.0.0

Rubyonrails ≫ Rails Version 3.0.0 Update beta

Rubyonrails ≫ Rails Version 3.0.0 Update beta2

Rubyonrails ≫ Rails Version 3.0.0 Update beta3

Rubyonrails ≫ Rails Version 3.0.0 Update beta4

Rubyonrails ≫ Rails Version 3.0.0 Update rc

Rubyonrails ≫ Rails Version 3.0.0 Update rc2

Rubyonrails ≫ Rails Version 3.0.1

Rubyonrails ≫ Rails Version 3.0.1 Update pre

Rubyonrails ≫ Rails Version 3.0.2

Rubyonrails ≫ Rails Version 3.0.2 Update pre

Rubyonrails ≫ Rails Version 3.0.3

Rubyonrails ≫ Rails Version 3.0.4 Update rc1

Rubyonrails ≫ Rails Version 3.0.5

Rubyonrails ≫ Rails Version 3.0.5 Update rc1

Rubyonrails ≫ Rails Version 3.0.6

Rubyonrails ≫ Rails Version 3.0.6 Update rc1

Rubyonrails ≫ Rails Version 3.0.6 Update rc2

Rubyonrails ≫ Rails Version 3.0.7

Rubyonrails ≫ Rails Version 3.0.7 Update rc1

Rubyonrails ≫ Rails Version 3.0.7 Update rc2

Rubyonrails ≫ Rails Version 3.0.8

Rubyonrails ≫ Rails Version 3.0.8 Update rc1

Rubyonrails ≫ Rails Version 3.0.8 Update rc2

Rubyonrails ≫ Rails Version 3.0.8 Update rc3

Rubyonrails ≫ Rails Version 3.0.8 Update rc4

Rubyonrails ≫ Rails Version 3.0.9

Rubyonrails ≫ Rails Version 3.0.9 Update rc1

Rubyonrails ≫ Rails Version 3.0.9 Update rc2

Rubyonrails ≫ Rails Version 3.0.9 Update rc3

Rubyonrails ≫ Rails Version 3.0.9 Update rc4

Rubyonrails ≫ Rails Version 3.0.9 Update rc5

Rubyonrails ≫ Rails Version 3.0.10

Rubyonrails ≫ Rails Version 3.0.10 Update rc1

Rubyonrails ≫ Rails Version 3.0.11

Rubyonrails ≫ Rails Version 3.0.12

Rubyonrails ≫ Rails Version 3.0.12 Update rc1

Rubyonrails ≫ Rails Version 3.0.13

Rubyonrails ≫ Rails Version 3.0.13 Update rc1

Rubyonrails ≫ Rails Version 3.0.14

Rubyonrails ≫ Ruby On Rails Version <= 3.0.16

Rubyonrails ≫ Ruby On Rails Version 0.5.0

Rubyonrails ≫ Ruby On Rails Version 0.5.5

Rubyonrails ≫ Ruby On Rails Version 0.5.6

Rubyonrails ≫ Ruby On Rails Version 0.5.7

Rubyonrails ≫ Ruby On Rails Version 0.6.0

Rubyonrails ≫ Ruby On Rails Version 0.6.5

Rubyonrails ≫ Ruby On Rails Version 0.7.0

Rubyonrails ≫ Ruby On Rails Version 0.8.0

Rubyonrails ≫ Ruby On Rails Version 0.8.5

Rubyonrails ≫ Ruby On Rails Version 0.9.0

Rubyonrails ≫ Ruby On Rails Version 3.0.4

Rubyonrails ≫ Rails Version 3.1.0

Rubyonrails ≫ Rails Version 3.1.0 Update beta1

Rubyonrails ≫ Rails Version 3.1.0 Update rc1

Rubyonrails ≫ Rails Version 3.1.0 Update rc2

Rubyonrails ≫ Rails Version 3.1.0 Update rc3

Rubyonrails ≫ Rails Version 3.1.0 Update rc4

Rubyonrails ≫ Rails Version 3.1.0 Update rc5

Rubyonrails ≫ Rails Version 3.1.0 Update rc6

Rubyonrails ≫ Rails Version 3.1.0 Update rc7

Rubyonrails ≫ Rails Version 3.1.0 Update rc8

Rubyonrails ≫ Rails Version 3.1.1

Rubyonrails ≫ Rails Version 3.1.1 Update rc1

Rubyonrails ≫ Rails Version 3.1.1 Update rc2

Rubyonrails ≫ Rails Version 3.1.1 Update rc3

Rubyonrails ≫ Rails Version 3.1.2

Rubyonrails ≫ Rails Version 3.1.2 Update rc1

Rubyonrails ≫ Rails Version 3.1.2 Update rc2

Rubyonrails ≫ Rails Version 3.1.3

Rubyonrails ≫ Rails Version 3.1.4

Rubyonrails ≫ Rails Version 3.1.4 Update rc1

Rubyonrails ≫ Rails Version 3.1.5

Rubyonrails ≫ Rails Version 3.1.5 Update rc1

Rubyonrails ≫ Rails Version 3.1.6

Rubyonrails ≫ Rails Version 3.1.7

Rubyonrails ≫ Rails Version 3.2.0

Rubyonrails ≫ Rails Version 3.2.0 Update rc1

Rubyonrails ≫ Rails Version 3.2.0 Update rc2

Rubyonrails ≫ Rails Version 3.2.1

Rubyonrails ≫ Rails Version 3.2.2

Rubyonrails ≫ Rails Version 3.2.2 Update rc1

Rubyonrails ≫ Rails Version 3.2.3

Rubyonrails ≫ Rails Version 3.2.3 Update rc1

Rubyonrails ≫ Rails Version 3.2.3 Update rc2

Rubyonrails ≫ Rails Version 3.2.4

Rubyonrails ≫ Rails Version 3.2.4 Update rc1

Rubyonrails ≫ Rails Version 3.2.5

Rubyonrails ≫ Rails Version 3.2.6

Rubyonrails ≫ Rails Version 3.2.7

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.98%	0.779

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://rhn.redhat.com/errata/RHSA-2013-0154.html

http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/

Vendor Advisory

http://secunia.com/advisories/50694

https://groups.google.com/group/rubyonrails-security/msg/7fbb5392d4d282b5?dmode=source&output=gplain

https://nvd.nist.gov/vuln/detail/CVE-2012-3465

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3465

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3465

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-3465