CVE-2011-2931: XSS
First published: Wed Aug 17 2011(Updated: )
An XSS vulnerability in the strip_tags helper in Ruby on Rails was reported [1] where, using specially crafted output, an attacker can successfully inject HTML into the document, which can be used to inject arbitrary javascript into the rendered page. This is corrected in upstream 3.0.10, 2.3.13, and 3.1.0rc5 versions. Patches are available in the advisory [1] and in git [2]. [1] <a href="http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b9130749b74ea12">http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b9130749b74ea12</a> [2] <a href="https://github.com/rails/rails/commit/586a944ddd4d03e66dea1093306147594748037a">https://github.com/rails/rails/commit/586a944ddd4d03e66dea1093306147594748037a</a>
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rubyonrails Ruby On Rails | =3.0.4 | |
| Rubyonrails Rails | =2.0.1 | |
| Rubyonrails Rails | =2.0.2 | |
| Rubyonrails Rails | =2.0.4 | |
| Rubyonrails Rails | =2.1.0 | |
| Rubyonrails Rails | =2.1.1 | |
| Rubyonrails Rails | =2.1.2 | |
| Rubyonrails Rails | =2.2.0 | |
| Rubyonrails Rails | =2.2.1 | |
| Rubyonrails Rails | =2.2.2 | |
| Rubyonrails Rails | =2.3.2 | |
| Rubyonrails Rails | =2.3.3 | |
| Rubyonrails Rails | =2.3.4 | |
| Rubyonrails Rails | =2.3.9 | |
| Rubyonrails Rails | =2.3.10 | |
| Rubyonrails Rails | =2.3.11 | |
| Rubyonrails Rails | =2.3.12 | |
| Rubyonrails Rails | =2.0.0-rc1 | |
| Rubyonrails Rails | =2.0.0-rc2 | |
| Rubyonrails Rails | =2.0.0 | |
| Rubyonrails Rails | =3.0.0-beta | |
| Rubyonrails Rails | =3.0.0-beta2 | |
| Rubyonrails Rails | =3.0.0-beta3 | |
| Rubyonrails Rails | =3.0.0-beta4 | |
| Rubyonrails Rails | =3.0.0-rc | |
| Rubyonrails Rails | =3.0.0-rc2 | |
| Rubyonrails Rails | =3.0.1-pre | |
| Rubyonrails Rails | =3.0.2-pre | |
| Rubyonrails Rails | =3.0.0 | |
| Rubyonrails Rails | =3.0.10-rc1 | |
| Rubyonrails Rails | =3.1.0-beta1 | |
| Rubyonrails Rails | =3.1.0-rc1 | |
| Rubyonrails Rails | =3.1.0-rc2 | |
| Rubyonrails Rails | =3.1.0-rc3 | |
| Rubyonrails Rails | =3.1.0-rc4 | |
| Rubyonrails Rails | =3.1.0 | |
| Rubyonrails Rails | =3.0.1 | |
| Rubyonrails Rails | =3.0.2 | |
| Rubyonrails Rails | =3.0.3 | |
| Rubyonrails Rails | =3.0.4-rc1 | |
| Rubyonrails Rails | =3.0.5 | |
| Rubyonrails Rails | =3.0.5-rc1 | |
| Rubyonrails Rails | =3.0.6-rc1 | |
| Rubyonrails Rails | =3.0.6-rc2 | |
| Rubyonrails Rails | =3.0.6 | |
| Rubyonrails Rails | =3.0.7-rc1 | |
| Rubyonrails Rails | =3.0.7-rc2 | |
| Rubyonrails Rails | =3.0.7 | |
| Rubyonrails Rails | =3.0.8-rc1 | |
| Rubyonrails Rails | =3.0.8-rc2 | |
| Rubyonrails Rails | =3.0.8-rc3 | |
| Rubyonrails Rails | =3.0.8-rc4 | |
| Rubyonrails Rails | =3.0.8 | |
| Rubyonrails Rails | =3.0.9-rc1 | |
| Rubyonrails Rails | =3.0.9-rc2 | |
| Rubyonrails Rails | =3.0.9-rc3 | |
| Rubyonrails Rails | =3.0.9-rc4 | |
| Rubyonrails Rails | =3.0.9 | |
| Rubyonrails Rails | =3.0.9-rc5 | |
| redhat/rubygem-actionpack | <2.3.13 | 2.3.13 |
| redhat/rubygem-actionpack | <3.0.10 | 3.0.10 |
| redhat/rubygem-actionpack | <3.1.0 | 3.1.0 |
| rubygems/actionpack | >=3.0.0<3.0.10 | 3.0.10 |
| rubygems/actionpack | >=2.0.0<2.3.13 | 2.3.13 |
Remedy
http://groups.google.com/group/rubyonrails-security/msg/fd41ab62966e0fd1?dmode=source&output=gplain
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://groups.google.com/group/rubyonrails-security/msg/fd41ab62966e0fd1?dmode=source&output=gplain
- http://www.openwall.com/lists/oss-security/2011/08/19/11
- http://www.openwall.com/lists/oss-security/2011/08/22/14
- http://www.openwall.com/lists/oss-security/2011/08/22/5
- http://www.openwall.com/lists/oss-security/2011/08/22/13
- https://bugzilla.redhat.com/show_bug.cgi?id=731436
- http://www.openwall.com/lists/oss-security/2011/08/20/1
- http://www.openwall.com/lists/oss-security/2011/08/17/1
- http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
- https://github.com/rails/rails/commit/586a944ddd4d03e66dea1093306147594748037a
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065137.html
- http://secunia.com/advisories/45921
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html
- http://www.debian.org/security/2011/dsa-2301
- https://nvd.nist.gov/vuln/detail/CVE-2011-2931
- https://github.com/advisories/GHSA-v5jg-558j-q67c (Advisory)
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-2931.yml
- http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b9130749b74ea12
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=731448
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=677629
- https://admin.fedoraproject.org/updates/rubygem-actionpack-2.3.8-4.fc14
- https://admin.fedoraproject.org/updates/rubygem-actionpack-3.0.5-4.fc15
- https://admin.fedoraproject.org/updates/rubygem-activesupport-3.0.10-1.fc16,rubygem-activemodel-3.0.10-1.fc16,rubygem-activerecord-3.0.10-1.fc16,rubygem-activeresource-3.0.10-1.fc16,rubygem-actionpack-3.0.10-1.fc16,rubygem-actionmailer-3.0.10-1.fc16,rubygem-railties-3.0.10-1.fc16,rubygem-rails-3.0.10-1.fc16
- collector/nvd-historical
- collector/nvd-index
- collector/github-advisory-latest
- alias/GHSA-v5jg-558j-q67c
- alias/CVE-2011-2931
- collector/nvd-cve
- collector/github-advisory
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- agent/weakness
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- agent/software-canonical-lookup
- vendor/rubyonrails
- canonical/rubyonrails ruby on rails
- version/rubyonrails ruby on rails/3.0.4
- canonical/rubyonrails rails
- version/rubyonrails rails/2.0.1
- version/rubyonrails rails/2.0.2
- version/rubyonrails rails/2.0.4
- version/rubyonrails rails/2.1.0
- version/rubyonrails rails/2.1.1
- version/rubyonrails rails/2.1.2
- version/rubyonrails rails/2.2.0
- version/rubyonrails rails/2.2.1
- version/rubyonrails rails/2.2.2
- version/rubyonrails rails/2.3.2
- version/rubyonrails rails/2.3.3
- version/rubyonrails rails/2.3.4
- version/rubyonrails rails/2.3.9
- version/rubyonrails rails/2.3.10
- version/rubyonrails rails/2.3.11
- version/rubyonrails rails/2.3.12
- version/rubyonrails rails/2.0.0-rc1
- version/rubyonrails rails/2.0.0-rc2
- version/rubyonrails rails/2.0.0
- version/rubyonrails rails/3.0.0-beta
- version/rubyonrails rails/3.0.0-beta2
- version/rubyonrails rails/3.0.0-beta3
- version/rubyonrails rails/3.0.0-beta4
- version/rubyonrails rails/3.0.0-rc
- version/rubyonrails rails/3.0.0-rc2
- version/rubyonrails rails/3.0.1-pre
- version/rubyonrails rails/3.0.2-pre
- version/rubyonrails rails/3.0.0
- version/rubyonrails rails/3.0.10-rc1
- version/rubyonrails rails/3.1.0-beta1
- version/rubyonrails rails/3.1.0-rc1
- version/rubyonrails rails/3.1.0-rc2
- version/rubyonrails rails/3.1.0-rc3
- version/rubyonrails rails/3.1.0-rc4
- version/rubyonrails rails/3.1.0
- version/rubyonrails rails/3.0.1
- version/rubyonrails rails/3.0.2
- version/rubyonrails rails/3.0.3
- version/rubyonrails rails/3.0.4-rc1
- version/rubyonrails rails/3.0.5
- version/rubyonrails rails/3.0.5-rc1
- version/rubyonrails rails/3.0.6-rc1
- version/rubyonrails rails/3.0.6-rc2
- version/rubyonrails rails/3.0.6
- version/rubyonrails rails/3.0.7-rc1
- version/rubyonrails rails/3.0.7-rc2
- version/rubyonrails rails/3.0.7
- version/rubyonrails rails/3.0.8-rc1
- version/rubyonrails rails/3.0.8-rc2
- version/rubyonrails rails/3.0.8-rc3
- version/rubyonrails rails/3.0.8-rc4
- version/rubyonrails rails/3.0.8
- version/rubyonrails rails/3.0.9-rc1
- version/rubyonrails rails/3.0.9-rc2
- version/rubyonrails rails/3.0.9-rc3
- version/rubyonrails rails/3.0.9-rc4
- version/rubyonrails rails/3.0.9
- version/rubyonrails rails/3.0.9-rc5
- package-manager/rubygems
- package-manager/redhat