GitHub Advisoryadvisory · RubyGems

GHSA-8r6h-7x9g-xmw9 will_paginate Cross-site Scripting vulnerability

MEDIUM Published 2017-10-24 Modified 2023-01-23 Official page ↗
Aliases
CVE-2013-6459
Ecosystem
RubyGems
Packages
will_paginate
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2020-06-16

Affected packages

• RubyGems will_paginate: < 3.0.5 → fixed in 3.0.5

Description

Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.

Related

Alias · CVE (1)

  • CVE-2013-6459 Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References