Skip to content
OpenAdvisories
Unscored DSA-2466-1 1 CVE

rails - cross site scripting

Published May 9, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 rails 2.3.5-1.2+squeeze3

Vulnerabilities 1

  • Medium —
    CVE-2012-1099

    Cross-site Scripting in actionpack

    Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script …

    rails actionpack Debian RubyGems