PT-2013-3435 · Ruby+1 · Ruby On Rails+1

Alan Jenkins · Published 2013-03-19 · Updated 2019-08-08 · CVE-2013-1857

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 2.3.18 Ruby on Rails versions 3.0.x through 3.1.11 Ruby on Rails versions 3.2.x through 3.2.12

Description The sanitize helper in the Action Pack component does not properly handle encoded : (colon) characters in URLs. This issue makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name. The attack can be demonstrated by including a : sequence in the URL.

Recommendations For Ruby on Rails versions prior to 2.3.18, update to version 2.3.18 or later. For Ruby on Rails versions 3.0.x through 3.1.11, update to version 3.1.12 or later. For Ruby on Rails versions 3.2.x through 3.2.12, update to version 3.2.13 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-1857

DSA-2655-1

GHSA-J838-VFPQ-FMF2

RHSA-2013:0698

Affected Products

Ruby On Rails

Suse

References · 18

• http://rhn.redhat.com/errata/RHSA-2013-0698.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00013.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00072.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00073.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1857 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1863.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-1857 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-1857 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1857 · Security Note
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j838-vfpq-fmf2 · Vendor Advisory
• https://github.com/rails/rails · Note
• https://web.archive.org/web/20131109010518/http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html · Note
• https://web.archive.org/web/20130609174600/http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html · Note