CVE-2016-6316

EPSS 3.44%
Veröffentlicht 07.09.2016 19:28:10
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 13

NVD 222 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rubyonrails ≫ Rails Version 3.0.0

Rubyonrails ≫ Rails Version 3.0.0 Update beta

Rubyonrails ≫ Rails Version 3.0.0 Update beta2

Rubyonrails ≫ Rails Version 3.0.0 Update beta3

Rubyonrails ≫ Rails Version 3.0.0 Update beta4

Rubyonrails ≫ Rails Version 3.0.0 Update rc

Rubyonrails ≫ Rails Version 3.0.0 Update rc2

Rubyonrails ≫ Rails Version 3.0.1

Rubyonrails ≫ Rails Version 3.0.2

Rubyonrails ≫ Rails Version 3.0.3

Rubyonrails ≫ Rails Version 3.0.4 Update rc1

Rubyonrails ≫ Rails Version 3.0.5

Rubyonrails ≫ Rails Version 3.0.5 Update rc1

Rubyonrails ≫ Rails Version 3.0.6

Rubyonrails ≫ Rails Version 3.0.6 Update rc1

Rubyonrails ≫ Rails Version 3.0.6 Update rc2

Rubyonrails ≫ Rails Version 3.0.7

Rubyonrails ≫ Rails Version 3.0.7 Update rc1

Rubyonrails ≫ Rails Version 3.0.7 Update rc2

Rubyonrails ≫ Rails Version 3.0.8

Rubyonrails ≫ Rails Version 3.0.8 Update rc1

Rubyonrails ≫ Rails Version 3.0.8 Update rc2

Rubyonrails ≫ Rails Version 3.0.8 Update rc3

Rubyonrails ≫ Rails Version 3.0.8 Update rc4

Rubyonrails ≫ Rails Version 3.0.9

Rubyonrails ≫ Rails Version 3.0.9 Update rc1

Rubyonrails ≫ Rails Version 3.0.9 Update rc2

Rubyonrails ≫ Rails Version 3.0.9 Update rc3

Rubyonrails ≫ Rails Version 3.0.9 Update rc4

Rubyonrails ≫ Rails Version 3.0.9 Update rc5

Rubyonrails ≫ Rails Version 3.0.10

Rubyonrails ≫ Rails Version 3.0.10 Update rc1

Rubyonrails ≫ Rails Version 3.0.11

Rubyonrails ≫ Rails Version 3.0.12

Rubyonrails ≫ Rails Version 3.0.12 Update rc1

Rubyonrails ≫ Rails Version 3.0.13

Rubyonrails ≫ Rails Version 3.0.13 Update rc1

Rubyonrails ≫ Rails Version 3.0.14

Rubyonrails ≫ Rails Version 3.0.16

Rubyonrails ≫ Rails Version 3.0.17

Rubyonrails ≫ Rails Version 3.0.18

Rubyonrails ≫ Rails Version 3.0.19

Rubyonrails ≫ Rails Version 3.0.20

Rubyonrails ≫ Rails Version 3.1.0

Rubyonrails ≫ Rails Version 3.1.0 Update beta1

Rubyonrails ≫ Rails Version 3.1.0 Update rc1

Rubyonrails ≫ Rails Version 3.1.0 Update rc2

Rubyonrails ≫ Rails Version 3.1.0 Update rc3

Rubyonrails ≫ Rails Version 3.1.0 Update rc4

Rubyonrails ≫ Rails Version 3.1.0 Update rc5

Rubyonrails ≫ Rails Version 3.1.0 Update rc6

Rubyonrails ≫ Rails Version 3.1.0 Update rc7

Rubyonrails ≫ Rails Version 3.1.0 Update rc8

Rubyonrails ≫ Rails Version 3.1.1

Rubyonrails ≫ Rails Version 3.1.1 Update rc1

Rubyonrails ≫ Rails Version 3.1.1 Update rc2

Rubyonrails ≫ Rails Version 3.1.1 Update rc3

Rubyonrails ≫ Rails Version 3.1.2

Rubyonrails ≫ Rails Version 3.1.2 Update rc1

Rubyonrails ≫ Rails Version 3.1.2 Update rc2

Rubyonrails ≫ Rails Version 3.1.3

Rubyonrails ≫ Rails Version 3.1.4

Rubyonrails ≫ Rails Version 3.1.4 Update rc1

Rubyonrails ≫ Rails Version 3.1.5

Rubyonrails ≫ Rails Version 3.1.5 Update rc1

Rubyonrails ≫ Rails Version 3.1.6

Rubyonrails ≫ Rails Version 3.1.7

Rubyonrails ≫ Rails Version 3.1.8

Rubyonrails ≫ Rails Version 3.1.9

Rubyonrails ≫ Rails Version 3.1.10

Rubyonrails ≫ Rails Version 3.1.12

Rubyonrails ≫ Rails Version 3.2.0

Rubyonrails ≫ Rails Version 3.2.0 Update rc1

Rubyonrails ≫ Rails Version 3.2.0 Update rc2

Rubyonrails ≫ Rails Version 3.2.1

Rubyonrails ≫ Rails Version 3.2.2

Rubyonrails ≫ Rails Version 3.2.2 Update rc1

Rubyonrails ≫ Rails Version 3.2.3

Rubyonrails ≫ Rails Version 3.2.3 Update rc1

Rubyonrails ≫ Rails Version 3.2.3 Update rc2

Rubyonrails ≫ Rails Version 3.2.4

Rubyonrails ≫ Rails Version 3.2.4 Update rc1

Rubyonrails ≫ Rails Version 3.2.5

Rubyonrails ≫ Rails Version 3.2.6

Rubyonrails ≫ Rails Version 3.2.7

Rubyonrails ≫ Rails Version 3.2.7 Update rc1

Rubyonrails ≫ Rails Version 3.2.8

Rubyonrails ≫ Rails Version 3.2.8 Update rc1

Rubyonrails ≫ Rails Version 3.2.8 Update rc2

Rubyonrails ≫ Rails Version 3.2.9

Rubyonrails ≫ Rails Version 3.2.9 Update rc1

Rubyonrails ≫ Rails Version 3.2.9 Update rc2

Rubyonrails ≫ Rails Version 3.2.9 Update rc3

Rubyonrails ≫ Rails Version 3.2.10

Rubyonrails ≫ Rails Version 3.2.11

Rubyonrails ≫ Rails Version 3.2.12

Rubyonrails ≫ Rails Version 3.2.13

Rubyonrails ≫ Rails Version 3.2.13 Update rc1

Rubyonrails ≫ Rails Version 3.2.13 Update rc2

Rubyonrails ≫ Rails Version 3.2.15

Rubyonrails ≫ Rails Version 3.2.15 Update rc3

Rubyonrails ≫ Rails Version 3.2.16

Rubyonrails ≫ Rails Version 3.2.17

Rubyonrails ≫ Rails Version 3.2.18

Rubyonrails ≫ Rails Version 3.2.21

Rubyonrails ≫ Rails Version 3.2.22.2

Rubyonrails ≫ Rails Version 4.0.0 Update -

Rubyonrails ≫ Rails Version 4.0.0 Update beta

Rubyonrails ≫ Rails Version 4.0.0 Update rc1

Rubyonrails ≫ Rails Version 4.0.0 Update rc2

Rubyonrails ≫ Rails Version 4.0.1 Update -

Rubyonrails ≫ Rails Version 4.0.1 Update rc1

Rubyonrails ≫ Rails Version 4.0.1 Update rc2

Rubyonrails ≫ Rails Version 4.0.1 Update rc3

Rubyonrails ≫ Rails Version 4.0.1 Update rc4

Rubyonrails ≫ Rails Version 4.0.2

Rubyonrails ≫ Rails Version 4.0.3

Rubyonrails ≫ Rails Version 4.0.4

Rubyonrails ≫ Rails Version 4.0.4 Update rc1

Rubyonrails ≫ Rails Version 4.0.5

Rubyonrails ≫ Rails Version 4.0.6

Rubyonrails ≫ Rails Version 4.0.6 Update rc1

Rubyonrails ≫ Rails Version 4.0.6 Update rc2

Rubyonrails ≫ Rails Version 4.0.6 Update rc3

Rubyonrails ≫ Rails Version 4.0.7

Rubyonrails ≫ Rails Version 4.0.8

Rubyonrails ≫ Rails Version 4.0.9

Rubyonrails ≫ Rails Version 4.0.10

Rubyonrails ≫ Rails Version 4.0.10 Update rc1

Rubyonrails ≫ Rails Version 4.1.0 Update -

Rubyonrails ≫ Rails Version 4.1.0 Update beta1

Rubyonrails ≫ Rails Version 4.1.0 Update beta2

Rubyonrails ≫ Rails Version 4.1.0 Update rc1

Rubyonrails ≫ Rails Version 4.1.0 Update rc2

Rubyonrails ≫ Rails Version 4.1.1

Rubyonrails ≫ Rails Version 4.1.2

Rubyonrails ≫ Rails Version 4.1.2 Update rc1

Rubyonrails ≫ Rails Version 4.1.2 Update rc2

Rubyonrails ≫ Rails Version 4.1.2 Update rc3

Rubyonrails ≫ Rails Version 4.1.3

Rubyonrails ≫ Rails Version 4.1.4

Rubyonrails ≫ Rails Version 4.1.5

Rubyonrails ≫ Rails Version 4.1.6

Rubyonrails ≫ Rails Version 4.1.6 Update rc1

Rubyonrails ≫ Rails Version 4.1.6 Update rc2

Rubyonrails ≫ Rails Version 4.1.7

Rubyonrails ≫ Rails Version 4.1.7.1

Rubyonrails ≫ Rails Version 4.1.8

Rubyonrails ≫ Rails Version 4.1.9

Rubyonrails ≫ Rails Version 4.1.9 Update rc1

Rubyonrails ≫ Rails Version 4.1.10

Rubyonrails ≫ Rails Version 4.1.10 Update rc1

Rubyonrails ≫ Rails Version 4.1.10 Update rc2

Rubyonrails ≫ Rails Version 4.1.10 Update rc3

Rubyonrails ≫ Rails Version 4.1.10 Update rc4

Rubyonrails ≫ Rails Version 4.1.12

Rubyonrails ≫ Rails Version 4.1.12 Update rc1

Rubyonrails ≫ Rails Version 4.1.13

Rubyonrails ≫ Rails Version 4.1.13 Update rc1

Rubyonrails ≫ Rails Version 4.1.14

Rubyonrails ≫ Rails Version 4.1.14 Update rc1

Rubyonrails ≫ Rails Version 4.1.14 Update rc2

Rubyonrails ≫ Rails Version 4.1.14.2

Rubyonrails ≫ Rails Version 4.1.15

Rubyonrails ≫ Rails Version 4.1.15 Update rc1

Rubyonrails ≫ Rails Version 4.1.16

Rubyonrails ≫ Rails Version 4.1.16 Update rc1

Rubyonrails ≫ Rails Version 4.2.0

Rubyonrails ≫ Rails Version 4.2.0 Update beta1

Rubyonrails ≫ Rails Version 4.2.0 Update beta2

Rubyonrails ≫ Rails Version 4.2.0 Update beta3

Rubyonrails ≫ Rails Version 4.2.0 Update beta4

Rubyonrails ≫ Rails Version 4.2.0 Update rc1

Rubyonrails ≫ Rails Version 4.2.0 Update rc2

Rubyonrails ≫ Rails Version 4.2.0 Update rc3

Rubyonrails ≫ Rails Version 4.2.1

Rubyonrails ≫ Rails Version 4.2.1 Update rc1

Rubyonrails ≫ Rails Version 4.2.1 Update rc2

Rubyonrails ≫ Rails Version 4.2.1 Update rc3

Rubyonrails ≫ Rails Version 4.2.1 Update rc4

Rubyonrails ≫ Rails Version 4.2.2

Rubyonrails ≫ Rails Version 4.2.3

Rubyonrails ≫ Rails Version 4.2.3 Update rc1

Rubyonrails ≫ Rails Version 4.2.4

Rubyonrails ≫ Rails Version 4.2.4 Update rc1

Rubyonrails ≫ Rails Version 4.2.5

Rubyonrails ≫ Rails Version 4.2.5 Update rc1

Rubyonrails ≫ Rails Version 4.2.5 Update rc2

Rubyonrails ≫ Rails Version 4.2.5.1

Rubyonrails ≫ Rails Version 4.2.5.2

Rubyonrails ≫ Rails Version 4.2.6

Rubyonrails ≫ Rails Version 4.2.6 Update rc1

Rubyonrails ≫ Rails Version 4.2.7

Rubyonrails ≫ Rails Version 4.2.7 Update rc1

Rubyonrails ≫ Rails Version 5.0.0 Update beta1

Rubyonrails ≫ Rails Version 5.0.0 Update beta1.1

Rubyonrails ≫ Rails Version 5.0.0 Update beta2

Rubyonrails ≫ Rails Version 5.0.0 Update beta3

Rubyonrails ≫ Rails Version 5.0.0 Update beta4

Rubyonrails ≫ Rails Version 5.0.0 Update rc1

Rubyonrails ≫ Rails Version 5.0.0 Update rc2

Rubyonrails ≫ Ruby On Rails Version 3.0.4

Rubyonrails ≫ Ruby On Rails Version 3.2.14

Rubyonrails ≫ Ruby On Rails Version 3.2.14 Update rc1

Rubyonrails ≫ Ruby On Rails Version 3.2.14 Update rc2

Rubyonrails ≫ Ruby On Rails Version 3.2.15 Update rc1

Rubyonrails ≫ Ruby On Rails Version 3.2.15 Update rc2

Rubyonrails ≫ Ruby On Rails Version 3.2.19

Rubyonrails ≫ Ruby On Rails Version 3.2.20

Rubyonrails ≫ Ruby On Rails Version 3.2.22

Rubyonrails ≫ Ruby On Rails Version 3.2.22.1

Rubyonrails ≫ Ruby On Rails Version 4.0.10 Update rc2

Rubyonrails ≫ Ruby On Rails Version 4.0.11

Rubyonrails ≫ Ruby On Rails Version 4.0.11.1

Rubyonrails ≫ Ruby On Rails Version 4.0.12

Rubyonrails ≫ Ruby On Rails Version 4.0.13

Rubyonrails ≫ Ruby On Rails Version 4.0.13 Update rc1

Rubyonrails ≫ Ruby On Rails Version 4.1.11

Rubyonrails ≫ Ruby On Rails Version 4.1.14.1

Rubyonrails ≫ Ruby On Rails Version 5.0.0

Rubyonrails ≫ Ruby On Rails Version 5.0.0 Update racecar1

Debian ≫ Debian Linux Version 8.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.44%	0.874

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.1	2.8	2.7	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://rhn.redhat.com/errata/RHSA-2016-1855.html

http://rhn.redhat.com/errata/RHSA-2016-1856.html

http://rhn.redhat.com/errata/RHSA-2016-1857.html

http://rhn.redhat.com/errata/RHSA-2016-1858.html

http://weblog.rubyonrails.org/2016/8/11/Rails-5-0-0-1-4-2-7-2-and-3-2-22-3-have-been-released/

Vendor Advisory

Release Notes

http://www.debian.org/security/2016/dsa-3651

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/08/11/3

Third Party Advisory

http://www.securityfocus.com/bid/92430

https://groups.google.com/forum/#%21topic/ruby-security-ann/8B2iV2tPRSE

https://puppet.com/security/cve/cve-2016-6316

https://nvd.nist.gov/vuln/detail/CVE-2016-6316

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-6316

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-6316

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-6316