Debian/rails: unknown
Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbit
Action: Upgrade rails to 2.3.11-0.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.11-0.1 | - |
Fixed versions
| 2.3.11-0.1 |
Sources
published · modified · JSON