CVE-2013-1857: XSS

Q: What is the severity of CVE-2013-1857?

CVE-2013-1857 has a severity rating that allows for potential unauthorized actions through crafted URLs.

Q: How do I fix CVE-2013-1857?

To fix CVE-2013-1857, update Action Pack to version 2.3.18, 3.1.12, or 3.2.13 or later.

Q: What versions of Ruby on Rails are affected by CVE-2013-1857?

CVE-2013-1857 affects Ruby on Rails versions prior to 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13.

Q: Is CVE-2013-1857 exploitable in production environments?

Yes, CVE-2013-1857 can be exploited in production environments if the vulnerable versions of Action Pack are in use.

Q: What components of Ruby on Rails does CVE-2013-1857 impact?

CVE-2013-1857 impacts the Action Pack component of Ruby on Rails.

Published Mar 19, 2013

Updated

The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : (colon) characters in URLs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name, as demonstrated by including a : sequence.

Other sources

Affected Software

166 affected componentsFixes available

rubygems/actionpack>=3.2.0<3.2.13

3.2.13

rubygems/actionpack>=3.0.0<3.1.12

3.1.12

rubygems/actionpack<2.3.18

2.3.18

redhat Enterprise Linux=6.0

rubyonrails Rails=0.9.1

rubyonrails Rails=0.9.2

rubyonrails Rails=0.9.3

rubyonrails Rails=0.9.4

rubyonrails Rails=0.9.4.1

rubyonrails Rails=0.10.0

rubyonrails Rails=0.10.1

rubyonrails Rails=0.11.0

rubyonrails Rails=0.11.1

rubyonrails Rails=0.12.0

rubyonrails Rails=0.12.1

rubyonrails Rails=0.13.0

rubyonrails Rails=0.13.1

rubyonrails Rails=0.14.1

rubyonrails Rails=0.14.2

rubyonrails Rails=0.14.3

rubyonrails Rails=0.14.4

rubyonrails Rails=1.0.0

rubyonrails Rails=1.1.0

rubyonrails Rails=1.1.1

rubyonrails Rails=1.1.2

rubyonrails Rails=1.1.3

rubyonrails Rails=1.1.4

rubyonrails Rails=1.1.5

rubyonrails Rails=1.1.6

rubyonrails Rails=1.2.0

rubyonrails Rails=1.2.1

rubyonrails Rails=1.2.2

rubyonrails Rails=1.2.3

rubyonrails Rails=1.2.4

rubyonrails Rails=1.2.5

rubyonrails Rails=1.2.6

rubyonrails Rails=1.9.5

rubyonrails Rails=2.0.0

rubyonrails Rails=2.0.0-rc1

rubyonrails Rails=2.0.0-rc2

rubyonrails Rails=2.0.1

rubyonrails Rails=2.0.2

rubyonrails Rails=2.0.4

rubyonrails Rails=2.1.0

rubyonrails Rails=2.1.1

rubyonrails Rails=2.1.2

rubyonrails Rails=2.2.0

rubyonrails Rails=2.2.1

rubyonrails Rails=2.2.2

rubyonrails Rails=2.3.0

rubyonrails Rails=2.3.1

rubyonrails Rails=2.3.2

rubyonrails Rails=2.3.3

rubyonrails Rails=2.3.4

rubyonrails Rails=2.3.9

rubyonrails Rails=2.3.10

rubyonrails Rails=2.3.11

rubyonrails Rails=2.3.12

rubyonrails Rails=2.3.13

rubyonrails Rails=2.3.14

rubyonrails Rails=2.3.15

rubyonrails Rails=2.3.16

rubyonrails ruby on Rails<=2.3.17

rubyonrails ruby on Rails=0.5.0

rubyonrails ruby on Rails=0.5.5

rubyonrails ruby on Rails=0.5.6

rubyonrails ruby on Rails=0.5.7

rubyonrails ruby on Rails=0.6.0

rubyonrails ruby on Rails=0.6.5

rubyonrails ruby on Rails=0.7.0

rubyonrails ruby on Rails=0.8.0

rubyonrails ruby on Rails=0.8.5

rubyonrails ruby on Rails=0.9.0

rubyonrails Rails=3.0.0

rubyonrails Rails=3.0.0-beta

rubyonrails Rails=3.0.0-beta2

rubyonrails Rails=3.0.0-beta3

rubyonrails Rails=3.0.0-beta4

rubyonrails Rails=3.0.0-rc

rubyonrails Rails=3.0.0-rc2

rubyonrails Rails=3.0.1

rubyonrails Rails=3.0.1-pre

rubyonrails Rails=3.0.2

rubyonrails Rails=3.0.2-pre

rubyonrails Rails=3.0.3

rubyonrails Rails=3.0.4-rc1

rubyonrails Rails=3.0.5

rubyonrails Rails=3.0.5-rc1

rubyonrails Rails=3.0.6

rubyonrails Rails=3.0.6-rc1

rubyonrails Rails=3.0.6-rc2

rubyonrails Rails=3.0.7

rubyonrails Rails=3.0.7-rc1

rubyonrails Rails=3.0.7-rc2

rubyonrails Rails=3.0.8

rubyonrails Rails=3.0.8-rc1

rubyonrails Rails=3.0.8-rc2

rubyonrails Rails=3.0.8-rc3

rubyonrails Rails=3.0.8-rc4

rubyonrails Rails=3.0.9

rubyonrails Rails=3.0.9-rc1

rubyonrails Rails=3.0.9-rc2

rubyonrails Rails=3.0.9-rc3

rubyonrails Rails=3.0.9-rc4

rubyonrails Rails=3.0.9-rc5

rubyonrails Rails=3.0.10

rubyonrails Rails=3.0.10-rc1

rubyonrails Rails=3.0.11

rubyonrails Rails=3.0.12

rubyonrails Rails=3.0.12-rc1

rubyonrails Rails=3.0.13

rubyonrails Rails=3.0.13-rc1

rubyonrails Rails=3.0.14

rubyonrails Rails=3.0.16

rubyonrails Rails=3.0.17

rubyonrails Rails=3.0.18

rubyonrails Rails=3.0.19

rubyonrails Rails=3.0.20

rubyonrails ruby on Rails=3.0.4

rubyonrails Rails=3.1.0

rubyonrails Rails=3.1.0-beta1

rubyonrails Rails=3.1.0-rc1

rubyonrails Rails=3.1.0-rc2

rubyonrails Rails=3.1.0-rc3

rubyonrails Rails=3.1.0-rc4

rubyonrails Rails=3.1.0-rc5

rubyonrails Rails=3.1.0-rc6

rubyonrails Rails=3.1.0-rc7

rubyonrails Rails=3.1.0-rc8

rubyonrails Rails=3.1.1

rubyonrails Rails=3.1.1-rc1

rubyonrails Rails=3.1.1-rc2

rubyonrails Rails=3.1.1-rc3

rubyonrails Rails=3.1.2

rubyonrails Rails=3.1.2-rc1

rubyonrails Rails=3.1.2-rc2

rubyonrails Rails=3.1.3

rubyonrails Rails=3.1.4

rubyonrails Rails=3.1.4-rc1

rubyonrails Rails=3.1.5

rubyonrails Rails=3.1.5-rc1

rubyonrails Rails=3.1.6

rubyonrails Rails=3.1.7

rubyonrails Rails=3.1.8

rubyonrails Rails=3.1.9

rubyonrails Rails=3.1.10

rubyonrails ruby on Rails=3.1.11

rubyonrails Rails=3.2.0

rubyonrails Rails=3.2.0-rc1

rubyonrails Rails=3.2.0-rc2

rubyonrails Rails=3.2.1

rubyonrails Rails=3.2.2

rubyonrails Rails=3.2.2-rc1

rubyonrails Rails=3.2.3

rubyonrails Rails=3.2.3-rc1

rubyonrails Rails=3.2.3-rc2

rubyonrails Rails=3.2.4

rubyonrails Rails=3.2.4-rc1

rubyonrails Rails=3.2.5

rubyonrails Rails=3.2.6

rubyonrails Rails=3.2.7

rubyonrails Rails=3.2.8

rubyonrails Rails=3.2.9

rubyonrails Rails=3.2.10

rubyonrails Rails=3.2.11

rubyonrails Rails=3.2.12

Event History

Mar 19, 2013

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Oct 24, 2017

Advisory Published

06:33 PM

Frequently Asked Questions

What is the severity of CVE-2013-1857?

CVE-2013-1857 has a severity rating that allows for potential unauthorized actions through crafted URLs.

How do I fix CVE-2013-1857?