PT-2013-3435 · Ruby+1 · Ruby On Rails+1

Alan Jenkins · Publicado 2013-03-19 · Atualizado 2019-08-08 · CVE-2013-1857

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 2.3.18 Ruby on Rails versions 3.0.x through 3.1.11 Ruby on Rails versions 3.2.x through 3.2.12

Description The sanitize helper in the Action Pack component does not properly handle encoded : (colon) characters in URLs. This issue makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name. The attack can be demonstrated by including a : sequence in the URL.

Recommendations For Ruby on Rails versions prior to 2.3.18, update to version 2.3.18 or later. For Ruby on Rails versions 3.0.x through 3.1.11, update to version 3.1.12 or later. For Ruby on Rails versions 3.2.x through 3.2.12, update to version 3.2.13 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-1857

DSA-2655-1

GHSA-J838-VFPQ-FMF2

RHSA-2013:0698

Produtos afetados

Ruby On Rails

Suse

Referências · 18

• https://github.com/rails/rails · Nota
• https://web.archive.org/web/20131109010518/http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html · Nota
• https://web.archive.org/web/20130609174600/http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html · Nota
• http://rhn.redhat.com/errata/RHSA-2013-0698.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00013.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00072.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00073.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1857 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html · Aviso do Fabricante
• http://weblog.rubyonrails.org/2013/3/18/SEC-ANN-Rails-3-2-13-3-1-12-and-2-3-18-have-been-released · Nota
• https://groups.google.com/group/rubyonrails-security/msg/78b9817a5943f6d6?dmode=source&output=gplain · Nota
• http://rhn.redhat.com/errata/RHSA-2014-1863.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-1857 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-1857 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1857 · Nota de Segurança