Skip to content
OpenAdvisories
Unscored DLA-167-1 1 CVE

redcloth - security update

Published Mar 7, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 redcloth 4.2.2-1.1+deb6u1

Vulnerabilities 1

  • Medium —
    CVE-2012-6684

    RedCloth Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.

    RedCloth ruby-redcloth Debian RubyGems