Ruby/rails/2.3.12


Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.

https://rubygems.org/gems/rails
UNKNOWN

2 Security Vulnerabilities

Cross site scripting in rails

Published date: 2022-04-22T00:24:28Z
CVE: CVE-2011-1497
Links:

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

Affected versions: ["3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0", "3.0.0.rc2", "3.0.0.rc", "3.0.0.beta4", "3.0.0.beta3", "3.0.0.beta2", "3.0.0.beta", "2.3.18", "2.3.17", "2.3.16", "2.3.15", "2.3.14", "2.3.12", "2.3.11", "2.3.10", "2.3.9", "2.3.9.pre", "2.3.8", "2.3.8.pre1", "2.3.7", "2.3.6", "2.3.5", "2.3.4", "2.3.3", "2.3.2", "2.2.3", "2.2.2", "2.1.2", "2.1.1", "2.1.0", "2.0.5", "2.0.4", "2.0.2", "2.0.1", "2.0.0", "1.2.6", "1.2.5", "1.2.4", "1.2.3", "1.2.2", "1.2.1", "1.2.0", "1.1.6", "1.1.5", "1.1.4", "1.1.3", "1.1.2", "1.1.1", "1.1.0", "1.0.0", "0.14.4", "0.14.3", "0.14.2", "0.14.1", "0.13.1", "0.13.0", "0.12.1", "0.12.0", "0.11.1", "0.11.0", "0.10.1", "0.10.0", "0.9.5", "0.9.4.1", "0.9.4", "0.9.3", "0.9.2", "0.9.1", "0.9.0", "0.8.5", "0.8.0"]
Secure versions: [5.2.0.rc2, 5.2.0.rc1, 5.2.0.beta2, 5.2.0.beta1, 5.1.7, 5.1.7.rc1, 5.1.6.2, 5.1.6.1, 5.1.6, 5.1.5, 5.1.5.rc1, 5.1.4, 5.1.4.rc1, 5.1.3, 5.1.3.rc3, 5.1.3.rc2, 5.1.3.rc1, 5.1.2, 5.1.2.rc1, 5.1.1, 5.1.0, 5.1.0.rc2, 5.1.0.rc1, 5.1.0.beta1, 5.0.7.2, 5.0.7.1, 5.0.7, 5.0.6, 5.0.6.rc1, 5.0.5, 5.0.5.rc2, 5.0.5.rc1, 5.0.4, 5.0.4.rc1, 5.0.3, 5.0.2, 5.0.2.rc1, 5.0.1, 5.0.1.rc2, 5.0.1.rc1, 5.0.0.1, 5.0.0, 5.0.0.rc2, 5.0.0.rc1, 5.0.0.racecar1, 5.0.0.beta4, 5.0.0.beta3, 5.0.0.beta2, 5.0.0.beta1.1, 5.0.0.beta1, 4.2.11.3, 4.2.11.2, 4.2.11.1, 4.2.11, 4.2.10, 4.2.10.rc1, 4.2.9, 4.2.9.rc2, 4.2.9.rc1, 4.2.8, 4.2.8.rc1, 4.2.7.1, 4.2.7, 4.2.7.rc1, 4.2.6, 4.2.6.rc1, 4.2.5.2, 4.2.5.1, 4.2.5, 4.2.5.rc2, 4.2.5.rc1, 4.2.4, 4.2.4.rc1, 4.2.3, 4.2.3.rc1, 4.2.2, 4.2.1, 4.2.1.rc4, 4.2.1.rc3, 4.2.1.rc2, 4.2.1.rc1, 4.2.0, 4.2.0.rc3, 4.2.0.rc2, 4.2.0.rc1, 4.2.0.beta4, 4.2.0.beta3, 4.2.0.beta2, 4.2.0.beta1, 4.1.16, 4.1.16.rc1, 4.1.15, 4.1.15.rc1, 4.1.14.2, 4.1.14.1, 4.1.14, 4.1.14.rc2, 4.1.14.rc1, 4.1.13, 4.1.13.rc1, 4.1.12, 4.1.12.rc1, 4.1.11, 4.1.10, 4.1.10.rc4, 4.1.10.rc3, 4.1.10.rc2, 4.1.10.rc1, 4.1.9, 4.1.9.rc1, 4.1.8, 4.1.7.1, 4.1.7, 4.1.6, 4.1.6.rc2, 4.1.6.rc1, 4.1.5, 4.1.4, 4.1.3, 4.1.2, 4.1.2.rc3, 4.1.2.rc2, 4.1.2.rc1, 4.1.1, 4.1.0, 4.1.0.rc2, 4.1.0.rc1, 4.1.0.beta2, 4.1.0.beta1, 4.0.13, 4.0.13.rc1, 4.0.12, 4.0.11.1, 4.0.11, 4.0.10, 4.0.10.rc2, 4.0.10.rc1, 4.0.9, 4.0.8, 4.0.7, 4.0.6, 4.0.6.rc3, 4.0.6.rc2, 4.0.6.rc1, 4.0.5, 4.0.4, 4.0.4.rc1, 4.0.3, 4.0.0.rc2, 4.0.0.rc1, 4.0.0.beta1, 3.2.22.5, 3.2.22.4, 3.2.22.3, 3.2.22.2, 3.2.22.1, 3.2.22, 3.2.21, 3.2.20, 3.2.19, 3.2.18, 3.2.17, 7.0.0.alpha2, 7.0.0.alpha1, 7.0.0.rc1, 7.0.0.rc3, 7.0.0.rc2, 7.1.0.beta1, 7.1.0.rc1, 7.1.0.rc2, 7.1.3.2, 7.1.3.1, 7.0.8.1, 6.1.7.7, 7.1.3.3, 7.0.8.2, 7.0.8.3, 7.2.0.beta1, 7.2.0.beta2, 7.1.3.4, 7.0.8.4, 6.1.7.8]
Recommendation: Update to version 7.1.3.4.

Rails vulnerable to Cross-site Scripting

Published date: 2017-10-24
CVE: 2014-0081
CVSS V2: 4.3
Links:

Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negativeformat, or (3) units parameter to the (a) numbertocurrency, (b) numbertopercentage, or (c) numberto_human helper.

Affected versions: ["3.1.12", "3.1.11", "3.1.10", "3.1.9", "3.1.8", "3.1.7", "3.1.6", "3.1.5", "3.1.5.rc1", "3.1.4", "3.1.4.rc1", "3.1.3", "3.1.2", "3.1.2.rc2", "3.1.2.rc1", "3.1.1", "3.1.1.rc3", "3.1.1.rc2", "3.1.1.rc1", "3.1.0", "3.1.0.rc8", "3.1.0.rc6", "3.1.0.rc5", "3.1.0.rc4", "3.1.0.rc3", "3.1.0.rc2", "3.1.0.rc1", "3.1.0.beta1", "3.0.20", "3.0.19", "3.0.18", "3.0.17", "3.0.16", "3.0.15", "3.0.14", "3.0.13", "3.0.13.rc1", "3.0.12", "3.0.12.rc1", "3.0.11", "3.0.10", "3.0.10.rc1", "3.0.9", "3.0.9.rc5", "3.0.9.rc4", "3.0.9.rc3", "3.0.9.rc1", "3.0.8", "3.0.8.rc4", "3.0.8.rc2", "3.0.8.rc1", "3.0.7", "3.0.7.rc2", "3.0.7.rc1", "3.0.6", "3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0", "3.0.0.rc2", "3.0.0.rc", "3.0.0.beta4", "3.0.0.beta3", "3.0.0.beta2", "3.0.0.beta", "2.3.18", "2.3.17", "2.3.16", "2.3.15", "2.3.14", "2.3.12", "2.3.11", "2.3.10", "2.3.9", "2.3.9.pre", "2.3.8", "2.3.8.pre1", "2.3.7", "2.3.6", "2.3.5", "2.3.4", "2.3.3", "2.3.2", "2.2.3", "2.2.2", "2.1.2", "2.1.1", "2.1.0", "2.0.5", "2.0.4", "2.0.2", "2.0.1", "2.0.0", "1.2.6", "1.2.5", "1.2.4", "1.2.3", "1.2.2", "1.2.1", "1.2.0", "1.1.6", "1.1.5", "1.1.4", "1.1.3", "1.1.2", "1.1.1", "1.1.0", "1.0.0", "0.14.4", "0.14.3", "0.14.2", "0.14.1", "0.13.1", "0.13.0", "0.12.1", "0.12.0", "0.11.1", "0.11.0", "0.10.1", "0.10.0", "0.9.5", "0.9.4.1", "0.9.4", "0.9.3", "0.9.2", "0.9.1", "0.9.0", "0.8.5", "0.8.0"]
Secure versions: [5.2.0.rc2, 5.2.0.rc1, 5.2.0.beta2, 5.2.0.beta1, 5.1.7, 5.1.7.rc1, 5.1.6.2, 5.1.6.1, 5.1.6, 5.1.5, 5.1.5.rc1, 5.1.4, 5.1.4.rc1, 5.1.3, 5.1.3.rc3, 5.1.3.rc2, 5.1.3.rc1, 5.1.2, 5.1.2.rc1, 5.1.1, 5.1.0, 5.1.0.rc2, 5.1.0.rc1, 5.1.0.beta1, 5.0.7.2, 5.0.7.1, 5.0.7, 5.0.6, 5.0.6.rc1, 5.0.5, 5.0.5.rc2, 5.0.5.rc1, 5.0.4, 5.0.4.rc1, 5.0.3, 5.0.2, 5.0.2.rc1, 5.0.1, 5.0.1.rc2, 5.0.1.rc1, 5.0.0.1, 5.0.0, 5.0.0.rc2, 5.0.0.rc1, 5.0.0.racecar1, 5.0.0.beta4, 5.0.0.beta3, 5.0.0.beta2, 5.0.0.beta1.1, 5.0.0.beta1, 4.2.11.3, 4.2.11.2, 4.2.11.1, 4.2.11, 4.2.10, 4.2.10.rc1, 4.2.9, 4.2.9.rc2, 4.2.9.rc1, 4.2.8, 4.2.8.rc1, 4.2.7.1, 4.2.7, 4.2.7.rc1, 4.2.6, 4.2.6.rc1, 4.2.5.2, 4.2.5.1, 4.2.5, 4.2.5.rc2, 4.2.5.rc1, 4.2.4, 4.2.4.rc1, 4.2.3, 4.2.3.rc1, 4.2.2, 4.2.1, 4.2.1.rc4, 4.2.1.rc3, 4.2.1.rc2, 4.2.1.rc1, 4.2.0, 4.2.0.rc3, 4.2.0.rc2, 4.2.0.rc1, 4.2.0.beta4, 4.2.0.beta3, 4.2.0.beta2, 4.2.0.beta1, 4.1.16, 4.1.16.rc1, 4.1.15, 4.1.15.rc1, 4.1.14.2, 4.1.14.1, 4.1.14, 4.1.14.rc2, 4.1.14.rc1, 4.1.13, 4.1.13.rc1, 4.1.12, 4.1.12.rc1, 4.1.11, 4.1.10, 4.1.10.rc4, 4.1.10.rc3, 4.1.10.rc2, 4.1.10.rc1, 4.1.9, 4.1.9.rc1, 4.1.8, 4.1.7.1, 4.1.7, 4.1.6, 4.1.6.rc2, 4.1.6.rc1, 4.1.5, 4.1.4, 4.1.3, 4.1.2, 4.1.2.rc3, 4.1.2.rc2, 4.1.2.rc1, 4.1.1, 4.1.0, 4.1.0.rc2, 4.1.0.rc1, 4.1.0.beta2, 4.1.0.beta1, 4.0.13, 4.0.13.rc1, 4.0.12, 4.0.11.1, 4.0.11, 4.0.10, 4.0.10.rc2, 4.0.10.rc1, 4.0.9, 4.0.8, 4.0.7, 4.0.6, 4.0.6.rc3, 4.0.6.rc2, 4.0.6.rc1, 4.0.5, 4.0.4, 4.0.4.rc1, 4.0.3, 4.0.0.rc2, 4.0.0.rc1, 4.0.0.beta1, 3.2.22.5, 3.2.22.4, 3.2.22.3, 3.2.22.2, 3.2.22.1, 3.2.22, 3.2.21, 3.2.20, 3.2.19, 3.2.18, 3.2.17, 7.0.0.alpha2, 7.0.0.alpha1, 7.0.0.rc1, 7.0.0.rc3, 7.0.0.rc2, 7.1.0.beta1, 7.1.0.rc1, 7.1.0.rc2, 7.1.3.2, 7.1.3.1, 7.0.8.1, 6.1.7.7, 7.1.3.3, 7.0.8.2, 7.0.8.3, 7.2.0.beta1, 7.2.0.beta2, 7.1.3.4, 7.0.8.4, 6.1.7.8]
Recommendation: Update to version 7.1.3.4.

473 Other Versions

Version License Security Released
6.1.0.rc1 MIT 1 2020-11-02 - 21:21 over 3 years
6.0.3.4 MIT 1 2020-10-07 - 16:51 over 3 years
6.0.3.3 MIT 1 2020-09-09 - 18:40 almost 4 years
6.0.3.2 MIT 1 2020-06-17 - 14:55 almost 4 years
6.0.3.1 MIT 1 2020-05-18 - 15:47 about 4 years
6.0.3 MIT 1 2020-05-06 - 18:06 about 4 years
6.0.3.rc1 MIT 1 2020-05-01 - 17:19 about 4 years
6.0.2.2 MIT 1 2020-03-19 - 16:44 about 4 years
6.0.2.1 MIT 1 2019-12-18 - 19:09 over 4 years
6.0.2 MIT 1 2019-12-13 - 18:22 over 4 years
6.0.2.rc2 MIT 1 2019-12-09 - 16:14 over 4 years
6.0.2.rc1 MIT 1 2019-11-27 - 15:14 over 4 years
6.0.1 MIT 1 2019-11-05 - 14:41 over 4 years
6.0.1.rc1 MIT 1 2019-10-31 - 20:12 over 4 years
6.0.0 MIT 1 2019-08-16 - 18:01 almost 5 years
6.0.0.rc2 MIT 1 2019-07-22 - 21:13 almost 5 years
6.0.0.rc1 MIT 1 2019-04-24 - 18:51 about 5 years
6.0.0.beta3 MIT 1 2019-03-13 - 17:03 over 5 years
6.0.0.beta2 MIT 1 2019-02-25 - 22:46 over 5 years
6.0.0.beta1 MIT 1 2019-01-18 - 21:24 over 5 years
5.2.4.4 MIT 1 2020-09-09 - 18:40 almost 4 years
5.2.4.3 MIT 1 2020-05-18 - 15:43 about 4 years
5.2.4.2 MIT 1 2020-03-19 - 16:38 about 4 years
5.2.4.1 MIT 1 2019-12-18 - 19:04 over 4 years
5.2.4 MIT 1 2019-11-27 - 15:48 over 4 years
5.2.4.rc1 MIT 1 2019-11-23 - 00:29 over 4 years
5.2.3 MIT 1 2019-03-28 - 03:02 about 5 years
5.2.3.rc1 MIT 1 2019-03-22 - 03:35 about 5 years
5.2.2.1 MIT 1 2019-03-13 - 16:54 over 5 years
5.2.2 MIT 1 2018-12-04 - 18:15 over 5 years
5.2.2.rc1 MIT 1 2018-11-28 - 22:55 over 5 years
5.2.1.1 MIT 1 2018-11-27 - 20:14 over 5 years
5.2.1 MIT 1 2018-08-07 - 21:44 almost 6 years
5.2.1.rc1 MIT 1 2018-07-30 - 20:22 almost 6 years
5.2.0 MIT 1 2018-04-09 - 20:07 about 6 years
5.2.0.rc2 MIT 2018-03-20 - 17:54 about 6 years
5.2.0.rc1 MIT 2018-01-30 - 23:38 over 6 years
5.2.0.beta2 MIT 2017-11-28 - 05:04 over 6 years
5.2.0.beta1 MIT 2017-11-27 - 19:19 over 6 years
5.1.7 MIT 2019-03-28 - 02:48 about 5 years
5.1.7.rc1 MIT 2019-03-22 - 04:13 about 5 years
5.1.6.2 MIT 2019-03-13 - 16:46 over 5 years
5.1.6.1 MIT 2018-11-27 - 20:11 over 5 years
5.1.6 MIT 2018-03-29 - 18:29 about 6 years
5.1.5 MIT 2018-02-14 - 20:02 over 6 years
5.1.5.rc1 MIT 2018-02-01 - 19:00 over 6 years
5.1.4 MIT 2017-09-08 - 00:52 almost 7 years
5.1.4.rc1 MIT 2017-08-24 - 19:37 almost 7 years
5.1.3 MIT 2017-08-03 - 19:15 almost 7 years
5.1.3.rc3 MIT 2017-07-31 - 19:12 almost 7 years
5.1.3.rc2 MIT 2017-07-25 - 20:18 almost 7 years
5.1.3.rc1 MIT 2017-07-19 - 19:38 almost 7 years
5.1.2 MIT 2017-06-26 - 21:51 almost 7 years
5.1.2.rc1 MIT 2017-06-20 - 17:03 almost 7 years
5.1.1 MIT 2017-05-12 - 20:11 about 7 years
5.1.0 MIT 2017-04-27 - 21:00 about 7 years
5.1.0.rc2 MIT 2017-04-21 - 01:31 about 7 years
5.1.0.rc1 MIT 2017-03-20 - 18:57 about 7 years
5.1.0.beta1 MIT 2017-02-23 - 20:00 over 7 years
5.0.7.2 MIT 2019-03-13 - 16:44 over 5 years
5.0.7.1 MIT 2018-11-27 - 20:09 over 5 years
5.0.7 MIT 2018-03-29 - 18:18 about 6 years
5.0.6 MIT 2017-09-08 - 00:47 almost 7 years
5.0.6.rc1 MIT 2017-08-24 - 19:21 almost 7 years
5.0.5 MIT 2017-07-31 - 19:05 almost 7 years
5.0.5.rc2 MIT 2017-07-25 - 20:26 almost 7 years
5.0.5.rc1 MIT 2017-07-19 - 19:43 almost 7 years
5.0.4 MIT 2017-06-19 - 21:58 almost 7 years
5.0.4.rc1 MIT 2017-06-14 - 20:49 almost 7 years
5.0.3 MIT 2017-05-12 - 20:08 about 7 years
5.0.2 MIT 2017-03-01 - 23:13 over 7 years
5.0.2.rc1 MIT 2017-02-25 - 00:55 over 7 years
5.0.1 MIT 2016-12-21 - 00:07 over 7 years
5.0.1.rc2 MIT 2016-12-09 - 19:13 over 7 years
5.0.1.rc1 MIT 2016-11-30 - 20:02 over 7 years
5.0.0.1 MIT 2016-08-11 - 17:35 almost 8 years
5.0.0 MIT 2016-06-30 - 21:32 almost 8 years
5.0.0.rc2 MIT 2016-06-22 - 20:03 almost 8 years
5.0.0.rc1 MIT 2016-05-06 - 21:57 about 8 years
5.0.0.racecar1 MIT 2016-05-06 - 22:02 about 8 years
5.0.0.beta4 MIT 2016-04-27 - 20:55 about 8 years
5.0.0.beta3 MIT 2016-02-24 - 16:16 over 8 years
5.0.0.beta2 MIT 2016-02-01 - 22:06 over 8 years
5.0.0.beta1.1 MIT 2016-01-25 - 19:26 over 8 years
5.0.0.beta1 MIT 2015-12-18 - 21:18 over 8 years
4.2.11.3 MIT 2020-05-15 - 18:35 about 4 years
4.2.11.2 MIT 2020-05-15 - 16:30 about 4 years
4.2.11.1 MIT 2019-03-13 - 16:37 over 5 years
4.2.11 MIT 2018-11-27 - 20:07 over 5 years
4.2.10 MIT 2017-09-27 - 14:29 over 6 years
4.2.10.rc1 MIT 2017-09-20 - 19:42 over 6 years
4.2.9 MIT 2017-06-26 - 21:30 almost 7 years
4.2.9.rc2 MIT 2017-06-19 - 22:28 almost 7 years
4.2.9.rc1 MIT 2017-06-13 - 18:50 almost 7 years
4.2.8 MIT 2017-02-21 - 16:08 over 7 years
4.2.8.rc1 MIT 2017-02-10 - 02:46 over 7 years
4.2.7.1 MIT 2016-08-11 - 17:35 almost 8 years
4.2.7 MIT 2016-07-13 - 02:57 almost 8 years
4.2.7.rc1 MIT 2016-07-01 - 00:33 almost 8 years
4.2.6 MIT 2016-03-07 - 22:33 over 8 years