GitHub Advisoryadvisory · RubyGems

GHSA-j838-vfpq-fmf2 actionpack Cross-site Scripting vulnerability

MEDIUM Published 2017-10-24 Modified 2023-01-23 Official page ↗
Aliases
CVE-2013-1857
Ecosystem
RubyGems
Packages
actionpack
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2020-06-16

Affected packages

• RubyGems actionpack: < 2.3.18 → fixed in 2.3.18 • RubyGems actionpack: >= 3.0.0, < 3.1.12 → fixed in 3.1.12 • RubyGems actionpack: >= 3.2.0, < 3.2.13 → fixed in 3.2.13

Description

The sanitize helper in `lib/action_controller/vendor/html-scanner/html/sanitizer.rb` in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded `:` (colon) characters in URLs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name, as demonstrated by including a `&#x3a;` sequence.

Related

Alias · CVE (1)

  • CVE-2013-1857 The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References