Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby on Rails Action View 跨站脚本漏洞
Vulnerability Description
Ruby on Rails（Rails）是Rails核心团队开发维护的一套基于Ruby语言的开源Web应用框架，它是由大卫-海纳梅尔-韩森从美国37signals公司的项目管理工具Basecamp里分离出来的。Action View是其中的一个用于渲染视图并可以在任何Ruby代码库中使用的独立代码库。 Ruby on Rails中的Action View中存在跨站脚本漏洞。以下版本受到影响：远程攻击者可借助文本声明为‘HTML safe’和用作标签处理器的任意值利用该漏洞执行任意Web脚本或HTML。Ra
CVSS Information
N/A
Vulnerability Type
N/A