Skip to content
OpenAdvisories
Unscored RHSA-2014:0306 2 CVEs

Red Hat Security Advisory: ruby193-rubygem-actionpack security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 1 rhel_software_collections:1::el6 ruby193-rubygem-actionpack 1:3.2.8-5.3.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 ruby193-rubygem-actionpack-doc 1:3.2.8-5.3.el6

Vulnerabilities 2

  • Medium —
    CVE-2014-0081

    Rails vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (…

    rails actionpack rails Debian RubyGems
  • Medium —
    CVE-2014-0082

    actionpack Improper Input Validation vulnerability

    actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consump…

    rails actionpack Debian RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065520
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065538
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0306.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0081
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0081
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0081
  • report
    https://access.redhat.com/security/cve/CVE-2014-0082
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0082
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0082