CVE-2011-1497

published 2021-10-19

CVE-2011-1497: A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
actionpack_project	actionpack	>= 3.0.0.rc < 3.0.6	3.0.6
debian	rails	—	—
rubyonrails	rails	< 3.0.6	3.0.6
rubyonrails	rails	—	—

CWE-79