tocsin

Debian/ruby-redcloth: unknown

Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.

Action: Upgrade ruby-redcloth to 4.2.9-4 or later.

Affected

introducedfixedlast affected
04.2.9-4-

Fixed versions

4.2.9-4

Sources

published · modified · JSON