Skip to content
OpenAdvisories

Package · Maven

org.jruby:jruby-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2010-1330

    Cross-site Scripting in in JRuby

    The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.

    jruby org.jruby:jruby-core Debian Maven