Skip to content
OpenAdvisories
Unscored DSA-1887-1 1 CVE

rails - cross-site scripting

Published Sep 15, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 rails 2.1.0-7

Vulnerabilities 1

  • Medium —
    CVE-2009-3009

    Cross site scripting that affects rails

    Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.

    rails actionpack activesupport Debian RubyGems