CVE-2011-1497

All Frameworks › Ruby on Rails › CWE-79 › CVE-2011-1497

CVE-2011-1497

State: PUBLISHED · Published: 2021-10-19 · Updated: 2024-08-06 · Assigner: redhat

Description

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

CWE

CWE-79 — CWE-79

Affected

n/a / rails — v=rails 3.0.6 [affected]

CVSS

(none)

References

https://www.openwall.com/lists/oss-security/2011/04/06/13 x_refsource_MISC
https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG x_refsource_MISC

Source

cvelistV5-main/cves/2011/1xxx/CVE-2011-1497.json