CVE-2011-2197: XSS
First published: Thu Jun 30 2011(Updated: )
The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rubyonrails Rails | =2.0.1 | |
| Rubyonrails Rails | =2.0.2 | |
| Rubyonrails Rails | =2.0.4 | |
| Rubyonrails Rails | =2.1.0 | |
| Rubyonrails Rails | =2.1.1 | |
| Rubyonrails Rails | =2.1.2 | |
| Rubyonrails Rails | =2.2.0 | |
| Rubyonrails Rails | =2.2.1 | |
| Rubyonrails Rails | =2.2.2 | |
| Rubyonrails Rails | =2.3.2 | |
| Rubyonrails Rails | =2.3.3 | |
| Rubyonrails Rails | =2.3.4 | |
| Rubyonrails Rails | =2.3.9 | |
| Rubyonrails Rails | =2.3.10 | |
| Rubyonrails Rails | =2.3.11 | |
| Rubyonrails Rails | =2.0.0-rc1 | |
| Rubyonrails Rails | =2.0.0-rc2 | |
| Rubyonrails Rails | =2.0.0 | |
| Rubyonrails Ruby On Rails | =3.0.4 | |
| Rubyonrails Rails | =3.0.0-beta | |
| Rubyonrails Rails | =3.0.0-beta2 | |
| Rubyonrails Rails | =3.0.0-beta3 | |
| Rubyonrails Rails | =3.0.0-beta4 | |
| Rubyonrails Rails | =3.0.0-rc | |
| Rubyonrails Rails | =3.0.0-rc2 | |
| Rubyonrails Rails | =3.0.1-pre | |
| Rubyonrails Rails | =3.0.2-pre | |
| Rubyonrails Rails | =3.0.0 | |
| Rubyonrails Rails | =3.0.1 | |
| Rubyonrails Rails | =3.0.2 | |
| Rubyonrails Rails | =3.0.3 | |
| Rubyonrails Rails | =3.0.4-rc1 | |
| Rubyonrails Rails | =3.0.5 | |
| Rubyonrails Rails | =3.0.5-rc1 | |
| Rubyonrails Rails | =3.0.6-rc1 | |
| Rubyonrails Rails | =3.0.6-rc2 | |
| Rubyonrails Rails | =3.0.6 | |
| Rubyonrails Rails | =3.0.7-rc1 | |
| Rubyonrails Rails | =3.0.7-rc2 | |
| Rubyonrails Rails | =3.0.7 | |
| Rubyonrails Rails | =3.0.8-rc1 | |
| Rubyonrails Rails | =3.0.8-rc2 | |
| Rubyonrails Rails | =3.0.8-rc3 | |
| Rubyonrails Rails | =3.0.8-rc4 | |
| Rubyonrails Rails | =3.1.0-beta1 | |
| Rubyonrails Rails | =3.1.0-rc1 | |
| Rubyonrails Rails | =3.1.0 | |
| rubygems/activesupport | >=3.0.0<3.0.7 | 3.0.8 |
| rubygems/activesupport | >=2.0.0<2.3.11 | 2.3.12 |
| rubygems/actionpack | >=3.0.0<3.0.7 | 3.0.8 |
| rubygems/actionpack | >=2.0.0<2.3.11 | 2.3.12 |
Remedy
http://groups.google.com/group/rubyonrails-security/msg/663b600d4471e0d4?dmode=source&output=gplain
Remedy
http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://openwall.com/lists/oss-security/2011/06/09/2
- http://groups.google.com/group/rubyonrails-security/msg/663b600d4471e0d4?dmode=source&output=gplain
- http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications
- http://openwall.com/lists/oss-security/2011/06/13/9
- http://secunia.com/advisories/44789
- http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062514.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062090.html
- https://nvd.nist.gov/vuln/detail/CVE-2011-2197
- https://github.com/rails/rails/commit/53a2c0baf2b128dd4808eca313256f6f4bb8c4cd
- https://github.com/rails/rails/commit/ed3796434af6069ced6a641293cf88eef3b284da
- https://gist.github.com/NZKoz/b2ceb626fc2bcdfe497f
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2011-2197.yml
- https://github.com/advisories/GHSA-v9v4-7jp6-8c73 (Advisory)
- collector/nvd-historical
- collector/nvd-index
- collector/github-advisory-latest
- alias/GHSA-v9v4-7jp6-8c73
- alias/CVE-2011-2197
- collector/nvd-cve
- collector/github-advisory
- agent/author
- agent/references
- agent/severity
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/weakness
- agent/type
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/rubyonrails
- canonical/rubyonrails rails
- version/rubyonrails rails/2.0.1
- version/rubyonrails rails/2.0.2
- version/rubyonrails rails/2.0.4
- version/rubyonrails rails/2.1.0
- version/rubyonrails rails/2.1.1
- version/rubyonrails rails/2.1.2
- version/rubyonrails rails/2.2.0
- version/rubyonrails rails/2.2.1
- version/rubyonrails rails/2.2.2
- version/rubyonrails rails/2.3.2
- version/rubyonrails rails/2.3.3
- version/rubyonrails rails/2.3.4
- version/rubyonrails rails/2.3.9
- version/rubyonrails rails/2.3.10
- version/rubyonrails rails/2.3.11
- version/rubyonrails rails/2.0.0-rc1
- version/rubyonrails rails/2.0.0-rc2
- version/rubyonrails rails/2.0.0
- canonical/rubyonrails ruby on rails
- version/rubyonrails ruby on rails/3.0.4
- version/rubyonrails rails/3.0.0-beta
- version/rubyonrails rails/3.0.0-beta2
- version/rubyonrails rails/3.0.0-beta3
- version/rubyonrails rails/3.0.0-beta4
- version/rubyonrails rails/3.0.0-rc
- version/rubyonrails rails/3.0.0-rc2
- version/rubyonrails rails/3.0.1-pre
- version/rubyonrails rails/3.0.2-pre
- version/rubyonrails rails/3.0.0
- version/rubyonrails rails/3.0.1
- version/rubyonrails rails/3.0.2
- version/rubyonrails rails/3.0.3
- version/rubyonrails rails/3.0.4-rc1
- version/rubyonrails rails/3.0.5
- version/rubyonrails rails/3.0.5-rc1
- version/rubyonrails rails/3.0.6-rc1
- version/rubyonrails rails/3.0.6-rc2
- version/rubyonrails rails/3.0.6
- version/rubyonrails rails/3.0.7-rc1
- version/rubyonrails rails/3.0.7-rc2
- version/rubyonrails rails/3.0.7
- version/rubyonrails rails/3.0.8-rc1
- version/rubyonrails rails/3.0.8-rc2
- version/rubyonrails rails/3.0.8-rc3
- version/rubyonrails rails/3.0.8-rc4
- version/rubyonrails rails/3.1.0-beta1
- version/rubyonrails rails/3.1.0-rc1
- version/rubyonrails rails/3.1.0
- package-manager/rubygems