Description

Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

Remediation

References

CVE-2009-3009

Related Vulnerabilities

MySQL CVE-2019-2481 Vulnerability (CVE-2019-2481)

OpenSSL Other Vulnerability (CVE-2002-0656)

Liferay DXP CVE-2022-42126 Vulnerability (CVE-2022-42126)

WordPress Plugin Content Grabber Multiple Vulnerabilities (1.0)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Multiple Vulnerabilities (4.5.0.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2009-3009