tocsin

Debian/rails: unknown

Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote

Action: Upgrade rails to 2.3.14.1 or later.

Affected

introducedfixedlast affected
02.3.14.1-

Fixed versions

2.3.14.1

Sources

published · modified · JSON