Description

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

Remediation

References

CVE-2011-1497

Related Vulnerabilities

TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55893)

Oracle Database Server CVE-2010-2411 Vulnerability (CVE-2010-2411)

Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-13402)

WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Cross-Site Request Forgery (4.4)

Joomla! Core 3.7.x Information Disclosure (3.7.0 - 3.7.5)

Severity

Medium

Classification

CVE-2011-1497 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities