Skip to content
OpenAdvisories

Package · RubyGems

rails

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2007-3227 Public exploit

    Moderate severity vulnerability that affects rails

    Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606 allows remote attackers to inject arbitrary web script via the input values.

    rails rails Debian RubyGems