GHSA-j838-vfpq-fmf2 — medium GitHub Advisory (CVE-2013-1857) in rubygems/actionpack

Description

The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : (colon) characters in URLs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name, as demonstrated by including a &#x3a; sequence.

Basic information

Type: reviewed
Severity: medium
Advisory on GitHub: Open advisory ↗
Repository advisory: —
Source code: Browse source ↗
Published (advisory): 2017-10-24 18:33:37 UTC
Updated: 2023-11-10 05:06:17 UTC
GitHub reviewed: 2020-06-16 21:42:30 UTC
NVD published: 2013-03-19

Score	Percentile
0.62%	69.53%

CVSS Scores

No CVSS scores in this advisory.

Identifiers

Type	Value
GHSA	GHSA-j838-vfpq-fmf2 ↗
CVE	CVE-2013-1857 ↗

CWEs

CWE id	Name
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected packages (3)

Vulnerable version ranges and first patched releases as published by GitHub.

Ecosystem	Package	Vulnerable range	First patched	Vulnerable functions
rubygems	actionpack	< 2.3.18	2.3.18	—
rubygems	actionpack	>= 3.0.0, < 3.1.12	3.1.12	—
rubygems	actionpack	>= 3.2.0, < 3.2.13	3.2.13	—

actionpack Cross-site Scripting vulnerability