tocsin

Debian/rails: unknown

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.

Action: Upgrade rails to 2.3.14 or later.

Affected

introducedfixedlast affected
02.3.14-

Fixed versions

2.3.14

Sources

published · modified · JSON