Ruby/rails/3.0.8.rc2


Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.

https://rubygems.org/gems/rails
UNKNOWN

2 Security Vulnerabilities

Moderate severity vulnerability that affects rails

Published date: 2017-10-24T18:33:36Z
CVE: CVE-2014-0081
Links:

Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/actionview/helpers/numberhelper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negativeformat, or (3) units parameter to the (a) numbertocurrency, (b) numbertopercentage, or (c) numberto_human helper.

Affected versions: ["4.0.2", "4.0.1", "4.0.1.rc4", "4.0.1.rc3", "4.0.1.rc2", "4.0.1.rc1", "4.0.0", "3.2.16", "3.2.15", "3.2.15.rc3", "3.2.15.rc2", "3.2.15.rc1", "3.2.14", "3.2.14.rc2", "3.2.14.rc1", "3.2.13", "3.2.13.rc2", "3.2.13.rc1", "3.2.12", "3.2.11", "3.2.10", "3.2.9", "3.2.9.rc3", "3.2.9.rc2", "3.2.9.rc1", "3.2.8", "3.2.8.rc2", "3.2.8.rc1", "3.2.7", "3.2.7.rc1", "3.2.6", "3.2.5", "3.2.4", "3.2.4.rc1", "3.2.3", "3.2.3.rc2", "3.2.3.rc1", "3.2.2", "3.2.2.rc1", "3.2.1", "3.2.0", "3.2.0.rc2", "3.2.0.rc1", "3.1.12", "3.1.11", "3.1.10", "3.1.9", "3.1.8", "3.1.7", "3.1.6", "3.1.5", "3.1.5.rc1", "3.1.4", "3.1.4.rc1", "3.1.3", "3.1.2", "3.1.2.rc2", "3.1.2.rc1", "3.1.1", "3.1.1.rc3", "3.1.1.rc2", "3.1.1.rc1", "3.1.0", "3.1.0.rc8", "3.1.0.rc6", "3.1.0.rc5", "3.1.0.rc4", "3.1.0.rc3", "3.1.0.rc2", "3.1.0.rc1", "3.1.0.beta1", "3.0.20", "3.0.19", "3.0.18", "3.0.17", "3.0.16", "3.0.15", "3.0.14", "3.0.13", "3.0.13.rc1", "3.0.12", "3.0.12.rc1", "3.0.11", "3.0.10", "3.0.10.rc1", "3.0.9", "3.0.9.rc5", "3.0.9.rc4", "3.0.9.rc3", "3.0.9.rc1", "3.0.8", "3.0.8.rc4", "3.0.8.rc2", "3.0.8.rc1", "3.0.7", "3.0.7.rc2", "3.0.7.rc1", "3.0.6", "3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0"]
Secure versions: [6.1.0.rc1, 6.0.3.4, 6.0.3.3, 6.0.3.2, 6.0.3.1, 6.0.3, 6.0.3.rc1, 6.0.2.2, 6.0.2.1, 6.0.2, 6.0.2.rc2, 6.0.2.rc1, 6.0.1, 6.0.1.rc1, 6.0.0, 6.0.0.rc2, 6.0.0.rc1, 6.0.0.beta3, 6.0.0.beta2, 6.0.0.beta1, 5.2.4.4, 5.2.4.3, 5.2.4.2, 5.2.4.1, 5.2.4, 5.2.4.rc1, 5.2.3, 5.2.3.rc1, 5.2.2.1, 5.2.2, 5.2.2.rc1, 5.2.1.1, 5.2.1, 5.2.1.rc1, 5.2.0, 5.2.0.rc2, 5.2.0.rc1, 5.2.0.beta2, 5.2.0.beta1, 5.1.7, 5.1.7.rc1, 5.1.6.2, 5.1.6.1, 5.1.6, 5.1.5, 5.1.5.rc1, 5.1.4, 5.1.4.rc1, 5.1.3, 5.1.3.rc3, 5.1.3.rc2, 5.1.3.rc1, 5.1.2, 5.1.2.rc1, 5.1.1, 5.1.0, 5.1.0.rc2, 5.1.0.rc1, 5.1.0.beta1, 5.0.7.2, 5.0.7.1, 5.0.7, 5.0.6, 5.0.6.rc1, 5.0.5, 5.0.5.rc2, 5.0.5.rc1, 5.0.4, 5.0.4.rc1, 5.0.3, 5.0.2, 5.0.2.rc1, 5.0.1, 5.0.1.rc2, 5.0.1.rc1, 5.0.0.1, 5.0.0, 5.0.0.rc2, 5.0.0.rc1, 5.0.0.racecar1, 5.0.0.beta4, 5.0.0.beta3, 5.0.0.beta2, 5.0.0.beta1.1, 5.0.0.beta1, 4.2.11.3, 4.2.11.2, 4.2.11.1, 4.2.11, 4.2.10, 4.2.10.rc1, 4.2.9, 4.2.9.rc2, 4.2.9.rc1, 4.2.8, 4.2.8.rc1, 4.2.7.1, 4.2.7, 4.2.7.rc1, 4.2.6, 4.2.6.rc1, 4.2.5.2, 4.2.5.1, 4.2.5, 4.2.5.rc2, 4.2.5.rc1, 4.2.4, 4.2.4.rc1, 4.2.3, 4.2.3.rc1, 4.2.2, 4.2.1, 4.2.1.rc4, 4.2.1.rc3, 4.2.1.rc2, 4.2.1.rc1, 4.2.0, 4.2.0.rc3, 4.2.0.rc2, 4.2.0.rc1, 4.2.0.beta4, 4.2.0.beta3, 4.2.0.beta2, 4.2.0.beta1, 4.1.16, 4.1.16.rc1, 4.1.15, 4.1.15.rc1, 4.1.14.2, 4.1.14.1, 4.1.14, 4.1.14.rc2, 4.1.14.rc1, 4.1.13, 4.1.13.rc1, 4.1.12, 4.1.12.rc1, 4.1.11, 4.1.10, 4.1.10.rc4, 4.1.10.rc3, 4.1.10.rc2, 4.1.10.rc1, 4.1.9, 4.1.9.rc1, 4.1.8, 4.1.7.1, 4.1.7, 4.1.6, 4.1.6.rc2, 4.1.6.rc1, 4.1.5, 4.1.4, 4.1.3, 4.1.2, 4.1.2.rc3, 4.1.2.rc2, 4.1.2.rc1, 4.1.1, 4.1.0, 4.1.0.rc2, 4.1.0.rc1, 4.1.0.beta2, 4.1.0.beta1, 4.0.13, 4.0.13.rc1, 4.0.12, 4.0.11.1, 4.0.11, 4.0.10, 4.0.10.rc2, 4.0.10.rc1, 4.0.9, 4.0.8, 4.0.7, 4.0.6, 4.0.6.rc3, 4.0.6.rc2, 4.0.6.rc1, 4.0.5, 4.0.4, 4.0.4.rc1, 4.0.3, 4.0.0.rc2, 4.0.0.rc1, 4.0.0.beta1, 3.2.22.5, 3.2.22.4, 3.2.22.3, 3.2.22.2, 3.2.22.1, 3.2.22, 3.2.21, 3.2.20, 3.2.19, 3.2.18, 3.2.17, 6.1.0.rc2, 6.1.0, 6.1.1, 6.1.2, 6.1.2.1, 6.0.3.5, 5.2.4.5, 6.1.3, 6.1.3.1, 6.0.3.6, 5.2.5, 6.1.3.2, 6.0.3.7, 5.2.6, 5.2.4.6, 6.0.4, 6.1.4, 6.1.4.1, 6.0.4.1, 7.0.0.alpha2, 7.0.0.alpha1, 7.0.0.rc1, 7.0.0.rc3, 7.0.0.rc2, 6.1.4.3, 6.1.4.2, 6.0.4.3, 6.0.4.2, 7.0.0, 6.1.4.4, 6.0.4.4, 7.0.1, 7.0.2, 7.0.2.2, 7.0.2.1, 6.1.4.6, 6.1.4.5, 6.0.4.6, 6.0.4.5, 5.2.6.2, 5.2.6.1, 6.0.4.7, 5.2.6.3, 7.0.2.3, 6.1.4.7, 6.1.5, 5.2.7, 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1, 7.0.3, 6.1.6, 6.0.5, 5.2.8, 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1, 7.0.4, 6.1.7, 6.0.6]
Recommendation: Update to version 7.0.4.

Moderate severity vulnerability that affects rails

Published date: 2017-10-24T18:33:38Z
CVE: CVE-2011-4319
Links:

Cross-site scripting (XSS) vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the rails_xss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string whose name ends with an html substring.

Affected versions: ["3.1.2.rc2", "3.1.2.rc1", "3.1.1", "3.1.1.rc3", "3.1.1.rc2", "3.1.1.rc1", "3.1.0", "3.0.10", "3.0.10.rc1", "3.0.9", "3.0.9.rc5", "3.0.9.rc4", "3.0.9.rc3", "3.0.9.rc1", "3.0.8", "3.0.8.rc4", "3.0.8.rc2", "3.0.8.rc1", "3.0.7", "3.0.7.rc2", "3.0.7.rc1", "3.0.6", "3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0"]
Secure versions: [6.1.0.rc1, 6.0.3.4, 6.0.3.3, 6.0.3.2, 6.0.3.1, 6.0.3, 6.0.3.rc1, 6.0.2.2, 6.0.2.1, 6.0.2, 6.0.2.rc2, 6.0.2.rc1, 6.0.1, 6.0.1.rc1, 6.0.0, 6.0.0.rc2, 6.0.0.rc1, 6.0.0.beta3, 6.0.0.beta2, 6.0.0.beta1, 5.2.4.4, 5.2.4.3, 5.2.4.2, 5.2.4.1, 5.2.4, 5.2.4.rc1, 5.2.3, 5.2.3.rc1, 5.2.2.1, 5.2.2, 5.2.2.rc1, 5.2.1.1, 5.2.1, 5.2.1.rc1, 5.2.0, 5.2.0.rc2, 5.2.0.rc1, 5.2.0.beta2, 5.2.0.beta1, 5.1.7, 5.1.7.rc1, 5.1.6.2, 5.1.6.1, 5.1.6, 5.1.5, 5.1.5.rc1, 5.1.4, 5.1.4.rc1, 5.1.3, 5.1.3.rc3, 5.1.3.rc2, 5.1.3.rc1, 5.1.2, 5.1.2.rc1, 5.1.1, 5.1.0, 5.1.0.rc2, 5.1.0.rc1, 5.1.0.beta1, 5.0.7.2, 5.0.7.1, 5.0.7, 5.0.6, 5.0.6.rc1, 5.0.5, 5.0.5.rc2, 5.0.5.rc1, 5.0.4, 5.0.4.rc1, 5.0.3, 5.0.2, 5.0.2.rc1, 5.0.1, 5.0.1.rc2, 5.0.1.rc1, 5.0.0.1, 5.0.0, 5.0.0.rc2, 5.0.0.rc1, 5.0.0.racecar1, 5.0.0.beta4, 5.0.0.beta3, 5.0.0.beta2, 5.0.0.beta1.1, 5.0.0.beta1, 4.2.11.3, 4.2.11.2, 4.2.11.1, 4.2.11, 4.2.10, 4.2.10.rc1, 4.2.9, 4.2.9.rc2, 4.2.9.rc1, 4.2.8, 4.2.8.rc1, 4.2.7.1, 4.2.7, 4.2.7.rc1, 4.2.6, 4.2.6.rc1, 4.2.5.2, 4.2.5.1, 4.2.5, 4.2.5.rc2, 4.2.5.rc1, 4.2.4, 4.2.4.rc1, 4.2.3, 4.2.3.rc1, 4.2.2, 4.2.1, 4.2.1.rc4, 4.2.1.rc3, 4.2.1.rc2, 4.2.1.rc1, 4.2.0, 4.2.0.rc3, 4.2.0.rc2, 4.2.0.rc1, 4.2.0.beta4, 4.2.0.beta3, 4.2.0.beta2, 4.2.0.beta1, 4.1.16, 4.1.16.rc1, 4.1.15, 4.1.15.rc1, 4.1.14.2, 4.1.14.1, 4.1.14, 4.1.14.rc2, 4.1.14.rc1, 4.1.13, 4.1.13.rc1, 4.1.12, 4.1.12.rc1, 4.1.11, 4.1.10, 4.1.10.rc4, 4.1.10.rc3, 4.1.10.rc2, 4.1.10.rc1, 4.1.9, 4.1.9.rc1, 4.1.8, 4.1.7.1, 4.1.7, 4.1.6, 4.1.6.rc2, 4.1.6.rc1, 4.1.5, 4.1.4, 4.1.3, 4.1.2, 4.1.2.rc3, 4.1.2.rc2, 4.1.2.rc1, 4.1.1, 4.1.0, 4.1.0.rc2, 4.1.0.rc1, 4.1.0.beta2, 4.1.0.beta1, 4.0.13, 4.0.13.rc1, 4.0.12, 4.0.11.1, 4.0.11, 4.0.10, 4.0.10.rc2, 4.0.10.rc1, 4.0.9, 4.0.8, 4.0.7, 4.0.6, 4.0.6.rc3, 4.0.6.rc2, 4.0.6.rc1, 4.0.5, 4.0.4, 4.0.4.rc1, 4.0.3, 4.0.0.rc2, 4.0.0.rc1, 4.0.0.beta1, 3.2.22.5, 3.2.22.4, 3.2.22.3, 3.2.22.2, 3.2.22.1, 3.2.22, 3.2.21, 3.2.20, 3.2.19, 3.2.18, 3.2.17, 6.1.0.rc2, 6.1.0, 6.1.1, 6.1.2, 6.1.2.1, 6.0.3.5, 5.2.4.5, 6.1.3, 6.1.3.1, 6.0.3.6, 5.2.5, 6.1.3.2, 6.0.3.7, 5.2.6, 5.2.4.6, 6.0.4, 6.1.4, 6.1.4.1, 6.0.4.1, 7.0.0.alpha2, 7.0.0.alpha1, 7.0.0.rc1, 7.0.0.rc3, 7.0.0.rc2, 6.1.4.3, 6.1.4.2, 6.0.4.3, 6.0.4.2, 7.0.0, 6.1.4.4, 6.0.4.4, 7.0.1, 7.0.2, 7.0.2.2, 7.0.2.1, 6.1.4.6, 6.1.4.5, 6.0.4.6, 6.0.4.5, 5.2.6.2, 5.2.6.1, 6.0.4.7, 5.2.6.3, 7.0.2.3, 6.1.4.7, 6.1.5, 5.2.7, 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1, 7.0.3, 6.1.6, 6.0.5, 5.2.8, 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1, 7.0.4, 6.1.7, 6.0.6]
Recommendation: Update to version 7.0.4.

437 Other Versions

Version License Security Released
2.0.5 UNKNOWN 7 2009-07-25 - 18:01 about 13 years
2.0.0 UNKNOWN 8 2009-07-25 - 18:01 about 13 years
2.0.2 UNKNOWN 8 2009-07-25 - 18:01 about 13 years
2.0.1 UNKNOWN 8 2009-07-25 - 18:01 about 13 years
2.0.4 UNKNOWN 8 2009-07-25 - 18:01 about 13 years
2.2.3 UNKNOWN 5 2009-09-28 - 09:25 about 13 years
2.3.6 UNKNOWN 4 2010-05-23 - 07:49 over 12 years
2.3.9.pre UNKNOWN 4 2010-08-30 - 03:32 about 12 years
2.3.8 UNKNOWN 4 2010-05-25 - 04:53 over 12 years
2.3.8.pre1 UNKNOWN 4 2010-05-24 - 21:17 over 12 years
2.3.7 UNKNOWN 4 2010-05-24 - 08:23 over 12 years
2.3.5 UNKNOWN 4 2009-11-27 - 00:12 almost 13 years
2.3.10 UNKNOWN 4 2010-10-14 - 20:53 almost 12 years
2.3.9 UNKNOWN 5 2010-09-04 - 21:54 about 12 years
2.2.2 UNKNOWN 7 2009-07-25 - 18:01 about 13 years
2.3.4 UNKNOWN 5 2009-09-04 - 17:33 about 13 years
2.3.2 UNKNOWN 8 2009-07-25 - 18:01 about 13 years
2.1.0 UNKNOWN 10 2009-07-25 - 18:01 about 13 years
2.1.2 UNKNOWN 9 2009-07-25 - 18:01 about 13 years
2.1.1 UNKNOWN 9 2009-07-25 - 18:01 about 13 years
2.3.3 UNKNOWN 7 2009-08-05 - 13:21 about 13 years
2.3.12 UNKNOWN 1 2011-06-08 - 00:22 over 11 years
2.3.15 UNKNOWN 1 2013-01-08 - 20:08 over 9 years
2.3.18 UNKNOWN 1 2013-03-18 - 17:13 over 9 years
2.3.16 UNKNOWN 1 2013-01-28 - 21:01 over 9 years
2.3.17 UNKNOWN 1 2013-02-11 - 18:17 over 9 years
3.0.0.beta2 UNKNOWN 1 2010-04-01 - 21:26 over 12 years
2.3.11 UNKNOWN 1 2011-02-08 - 21:17 over 11 years
2.3.14 UNKNOWN 1 2011-08-16 - 22:01 about 11 years
3.0.0.beta UNKNOWN 1 2010-02-05 - 03:02 over 12 years
3.0.0.beta4 UNKNOWN 1 2010-06-08 - 22:33 over 12 years
3.0.0.rc2 UNKNOWN 1 2010-08-24 - 03:04 about 12 years
3.0.0.beta3 UNKNOWN 1 2010-04-13 - 19:23 over 12 years
3.0.0.rc UNKNOWN 1 2010-07-26 - 21:43 about 12 years
3.0.6.rc2 UNKNOWN 4 2011-03-31 - 05:28 over 11 years
3.0.5.rc1 UNKNOWN 4 2011-02-23 - 19:08 over 11 years
3.0.4 UNKNOWN 4 2011-02-08 - 21:17 over 11 years
3.0.5 UNKNOWN 4 2011-02-27 - 02:30 over 11 years
3.0.6.rc1 UNKNOWN 4 2011-03-29 - 20:47 over 11 years
3.0.2 UNKNOWN 6 2010-11-15 - 19:33 almost 12 years
3.0.1 UNKNOWN 6 2010-10-14 - 20:55 almost 12 years
3.0.4.rc1 UNKNOWN 6 2011-01-30 - 23:00 over 11 years
3.0.3 UNKNOWN 6 2010-11-16 - 16:29 almost 12 years
3.0.0 UNKNOWN 7 2010-08-29 - 23:11 about 12 years
3.0.6 UNKNOWN 3 2011-04-05 - 23:05 over 11 years
3.0.7.rc2 UNKNOWN 3 2011-04-15 - 17:33 over 11 years
3.0.7.rc1 UNKNOWN 3 2011-04-14 - 21:57 over 11 years
3.0.9.rc5 UNKNOWN 2 2011-06-12 - 21:30 over 11 years
3.0.10.rc1 UNKNOWN 2 2011-08-05 - 00:12 about 11 years
3.0.10 UNKNOWN 2 2011-08-16 - 22:14 about 11 years
3.0.9 UNKNOWN 2 2011-06-16 - 10:05 over 11 years
3.0.7 UNKNOWN 2 2011-04-18 - 21:05 over 11 years
3.0.8.rc1 UNKNOWN 2 2011-05-26 - 00:11 over 11 years
3.1.1 UNKNOWN 2 2011-10-07 - 15:30 almost 11 years
3.1.1.rc2 UNKNOWN 2 2011-09-29 - 22:17 almost 11 years
3.1.2.rc2 UNKNOWN 2 2011-11-14 - 15:49 almost 11 years
3.1.2.rc1 UNKNOWN 2 2011-11-14 - 14:17 almost 11 years
3.1.1.rc1 UNKNOWN 2 2011-09-15 - 00:27 about 11 years
3.1.1.rc3 UNKNOWN 2 2011-10-06 - 02:31 almost 11 years
3.0.9.rc3 UNKNOWN 2 2011-06-09 - 22:51 over 11 years
3.0.9.rc1 UNKNOWN 2 2011-06-08 - 21:20 over 11 years
3.0.9.rc4 UNKNOWN 2 2011-06-12 - 21:24 over 11 years
3.1.0 UNKNOWN 2 2011-08-31 - 02:18 about 11 years
3.0.8.rc4 UNKNOWN 2 2011-05-31 - 00:08 over 11 years
3.0.8.rc2 UNKNOWN 2 2011-05-27 - 16:32 over 11 years
3.0.8 UNKNOWN 2 2011-06-08 - 00:16 over 11 years
3.2.15.rc2 MIT 1 2013-10-04 - 20:48 almost 9 years
3.2.15 MIT 1 2013-10-16 - 17:23 almost 9 years
3.2.2 UNKNOWN 1 2012-03-01 - 17:52 over 10 years
3.2.13.rc2 UNKNOWN 1 2013-03-06 - 23:06 over 9 years
3.2.16 MIT 1 2013-12-03 - 19:01 almost 9 years
3.2.10 UNKNOWN 1 2013-01-02 - 21:20 over 9 years
3.2.15.rc3 MIT 1 2013-10-11 - 21:17 almost 9 years
3.1.7 UNKNOWN 1 2012-07-26 - 22:09 about 10 years
4.0.1.rc4 MIT 1 2013-10-30 - 20:49 almost 9 years
3.2.15.rc1 MIT 1 2013-10-03 - 18:54 almost 9 years
3.2.8.rc1 UNKNOWN 1 2012-08-01 - 20:57 about 10 years
3.2.14 MIT 1 2013-07-22 - 16:44 about 9 years
3.0.12.rc1 UNKNOWN 1 2012-02-22 - 21:39 over 10 years
3.0.13 UNKNOWN 1 2012-05-31 - 18:24 over 10 years
3.0.14 UNKNOWN 1 2012-06-12 - 21:26 over 10 years
3.0.11 UNKNOWN 1 2011-11-18 - 01:23 almost 11 years
3.0.19 UNKNOWN 1 2013-01-08 - 20:08 over 9 years
3.0.15 UNKNOWN 1 2012-06-13 - 03:07 over 10 years
4.0.0 MIT 1 2013-06-25 - 14:32 over 9 years
3.1.2 UNKNOWN 1 2011-11-18 - 01:33 almost 11 years
4.0.1.rc3 MIT 1 2013-10-23 - 21:41 almost 9 years
4.0.1.rc1 MIT 1 2013-10-17 - 16:46 almost 9 years
4.0.1.rc2 MIT 1 2013-10-21 - 22:01 almost 9 years
4.0.2 MIT 1 2013-12-03 - 19:01 almost 9 years
4.0.1 MIT 1 2013-11-01 - 19:08 almost 9 years
3.1.9 UNKNOWN 1 2013-01-02 - 21:19 over 9 years
3.0.12 UNKNOWN 1 2012-03-01 - 17:52 over 10 years
3.0.20 UNKNOWN 1 2013-01-28 - 21:01 over 9 years
3.0.13.rc1 UNKNOWN 1 2012-05-28 - 19:01 over 10 years
3.1.0.beta1 UNKNOWN 1 2011-05-05 - 01:23 over 11 years
3.1.0.rc4 UNKNOWN 1 2011-06-09 - 22:56 over 11 years
3.1.0.rc1 UNKNOWN 1 2011-05-22 - 02:26 over 11 years
3.1.6 UNKNOWN 1 2012-06-12 - 21:26 over 10 years
3.1.0.rc8 UNKNOWN 1 2011-08-29 - 03:27 about 11 years