Description

Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606 allows remote attackers to inject arbitrary web script via the input values.

Remediation

References

CVE-2007-3227

Related Vulnerabilities

PostgreSQL Other Vulnerability (CVE-2004-0547)

WordPress Uncontrolled Resource Consumption Vulnerability (CVE-2018-6389)

MySQL CVE-2024-21209 Vulnerability (CVE-2024-21209)

WordPress Plugin Advanced Woo Search Unspecified Vulnerability (1.69)

WordPress Plugin Yasr-Yet Another Stars Rating Unspecified Vulnerability (0.9.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2007-3227