PT-2011-2349 · Ruby+1 · Ruby On Rails+1

Brendan Coles + 1 · Published 2011-02-14 · Updated 2019-08-08 · CVE-2011-0446

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 2.3.11 and earlier Ruby on Rails versions 3.0.4 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email value in the mail to helper when javascript encoding is used. This is a cross-site scripting (XSS) issue.

Recommendations For Ruby on Rails versions 2.3.11 and earlier, update to version 2.3.11 or later. For Ruby on Rails versions 3.0.4 and earlier, update to version 3.0.4 or later. As a temporary workaround, consider disabling the mail to helper function until a patch is available. Restrict input for the name and email values in the mail to helper to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-0446

DSA-2247-1

GHSA-75W6-P6MG-VH8J

Affected Products

Ruby On Rails

Suse

References · 26

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2011-0446.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-0446.yml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0446 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html · Vendor Advisory
• http://groups.google.com/group/rubyonrails-security/msg/365b8a23b76a6b4a?dmode=source&output=gplain · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0446 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html · Vendor Advisory
• http://debian.org/security/2011/dsa-2247 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0446 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-75w6-p6mg-vh8j · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-0446 · Vendor Advisory
• https://github.com/rails/rails · Note
• https://github.com/rails/rails/commit/e3dd2107c57a8efaaea5d61cf8da65f7444760b2 · Note
• https://github.com/rails/rails/commit/abe97736b8316f1b714cac56c115c0779aa73217 · Note