PT-2011-2349 · Ruby+1 · Ruby On Rails+1

Brendan Coles + 1 · Publicado 2011-02-14 · Atualizado 2019-08-08 · CVE-2011-0446

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 2.3.11 and earlier Ruby on Rails versions 3.0.4 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email value in the mail to helper when javascript encoding is used. This is a cross-site scripting (XSS) issue.

Recommendations For Ruby on Rails versions 2.3.11 and earlier, update to version 2.3.11 or later. For Ruby on Rails versions 3.0.4 and earlier, update to version 3.0.4 or later. As a temporary workaround, consider disabling the mail to helper function until a patch is available. Restrict input for the name and email values in the mail to helper to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-0446

DSA-2247-1

GHSA-75W6-P6MG-VH8J

Produtos afetados

Ruby On Rails

Suse

Referências · 26

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2011-0446.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-0446.yml · Exploit
• https://github.com/rails/rails · Nota
• https://github.com/rails/rails/commit/e3dd2107c57a8efaaea5d61cf8da65f7444760b2 · Nota
• https://github.com/rails/rails/commit/abe97736b8316f1b714cac56c115c0779aa73217 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0446 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html · Aviso do Fabricante
• https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43666 · Nota
• https://web.archive.org/web/20120527023027/http://securityfocus.com/bid/46291 · Nota
• https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43274 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html · Aviso do Fabricante
• http://groups.google.com/group/rubyonrails-security/msg/365b8a23b76a6b4a?dmode=source&output=gplain · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0446 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html · Aviso do Fabricante
• http://debian.org/security/2011/dsa-2247 · Aviso do Fabricante