Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThyNmgtN3g5Zy14bXc5
will_paginate Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.
Permalink: https://github.com/advisories/GHSA-8r6h-7x9g-xmw9JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThyNmgtN3g5Zy14bXc5
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 6 years ago
Updated: 6 months ago
Identifiers: GHSA-8r6h-7x9g-xmw9, CVE-2013-6459
References:
- https://nvd.nist.gov/vuln/detail/CVE-2013-6459
- https://access.redhat.com/errata/RHSA-2018:0336
- https://github.com/mislav/will_paginate/releases/tag/v3.0.5
- https://web.archive.org/web/20150709163604/http://www.securityfocus.com/bid/64509
- https://github.com/advisories/GHSA-8r6h-7x9g-xmw9
Blast Radius: 0.0
Affected Packages
rubygems:will_paginate
Dependent packages: 502Dependent repositories: 72,883
Downloads: 80,314,852 total
Affected Version Ranges: < 3.0.5
Fixed in: 3.0.5
All affected versions: 2.1.0, 2.2.0, 2.2.1, 2.2.2, 2.3.11, 2.3.12, 2.3.14, 2.3.15, 2.3.16, 2.3.17, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4
All unaffected versions: 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12, 3.1.0, 3.1.1, 3.1.2, 3.1.3, 3.1.5, 3.1.6, 3.1.7, 3.1.8, 3.2.0, 3.2.1, 3.3.0, 3.3.1, 4.0.0