Description

The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method.

Remediation

References

CVE-2011-2197

Related Vulnerabilities

WildFly Application Server Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2016-4993)

MediaWiki Incorrect Authorization Vulnerability (CVE-2023-22945)

MySQL Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-4098)

WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.3)

MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-24734)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-2197