Description (CNA)
A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / rails | affected rails 3.0.6 |
CWE
CWE-79
References
- https://www.openwall.com/lists/oss-security/2011/04/06/13
- https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG
ADP enrichment
No English description supplied.