Ruby/rails/4.0.1
Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
https://rubygems.org/gems/rails
MIT
1 Security Vulnerabilities
Rails vulnerable to Cross-site Scripting
Published date: 2017-10-24T18:33:36Z
CVE: CVE-2014-0081
Links:
- https://nvd.nist.gov/vuln/detail/CVE-2014-0081
- https://github.com/advisories/GHSA-m46p-ggm5-5j83
- https://groups.google.com/forum/message/raw?msg=rubyonrails-security/tfp6gZCtzr4/j8LUHmu7fIEJ
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html
- http://openwall.com/lists/oss-security/2014/02/18/8
- http://rhn.redhat.com/errata/RHSA-2014-0215.html
- http://rhn.redhat.com/errata/RHSA-2014-0306.html
- http://secunia.com/advisories/57376
- http://www.securityfocus.com/bid/65647
- http://www.securitytracker.com/id/1029782
- https://web.archive.org/web/20140911141416/http://www.securitytracker.com/id/1029782
- https://web.archive.org/web/20170307202606/http://www.securityfocus.com/bid/65647
Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negativeformat, or (3) units parameter to the (a) numbertocurrency, (b) numbertopercentage, or (c) numberto_human helper.
Affected versions:
["4.0.2", "4.0.1", "4.0.1.rc4", "4.0.1.rc3", "4.0.1.rc2", "4.0.1.rc1", "4.0.0", "3.2.16", "3.2.15", "3.2.15.rc3", "3.2.15.rc2", "3.2.15.rc1", "3.2.14", "3.2.14.rc2", "3.2.14.rc1", "3.2.13", "3.2.13.rc2", "3.2.13.rc1", "3.2.12", "3.2.11", "3.2.10", "3.2.9", "3.2.9.rc3", "3.2.9.rc2", "3.2.9.rc1", "3.2.8", "3.2.8.rc2", "3.2.8.rc1", "3.2.7", "3.2.7.rc1", "3.2.6", "3.2.5", "3.2.4", "3.2.4.rc1", "3.2.3", "3.2.3.rc2", "3.2.3.rc1", "3.2.2", "3.2.2.rc1", "3.2.1", "3.2.0", "3.2.0.rc2", "3.2.0.rc1", "3.1.12", "3.1.11", "3.1.10", "3.1.9", "3.1.8", "3.1.7", "3.1.6", "3.1.5", "3.1.5.rc1", "3.1.4", "3.1.4.rc1", "3.1.3", "3.1.2", "3.1.2.rc2", "3.1.2.rc1", "3.1.1", "3.1.1.rc3", "3.1.1.rc2", "3.1.1.rc1", "3.1.0", "3.1.0.rc8", "3.1.0.rc6", "3.1.0.rc5", "3.1.0.rc4", "3.1.0.rc3", "3.1.0.rc2", "3.1.0.rc1", "3.1.0.beta1", "3.0.20", "3.0.19", "3.0.18", "3.0.17", "3.0.16", "3.0.15", "3.0.14", "3.0.13", "3.0.13.rc1", "3.0.12", "3.0.12.rc1", "3.0.11", "3.0.10", "3.0.10.rc1", "3.0.9", "3.0.9.rc5", "3.0.9.rc4", "3.0.9.rc3", "3.0.9.rc1", "3.0.8", "3.0.8.rc4", "3.0.8.rc2", "3.0.8.rc1", "3.0.7", "3.0.7.rc2", "3.0.7.rc1", "3.0.6", "3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0"]
Secure versions:
[6.1.0.rc1, 6.0.3.4, 6.0.3.3, 6.0.3.2, 6.0.3.1, 6.0.3, 6.0.3.rc1, 6.0.2.2, 6.0.2.1, 6.0.2, 6.0.2.rc2, 6.0.2.rc1, 6.0.1, 6.0.1.rc1, 6.0.0, 6.0.0.rc2, 6.0.0.rc1, 6.0.0.beta3, 6.0.0.beta2, 6.0.0.beta1, 5.2.4.4, 5.2.4.3, 5.2.4.2, 5.2.4.1, 5.2.4, 5.2.4.rc1, 5.2.3, 5.2.3.rc1, 5.2.2.1, 5.2.2, 5.2.2.rc1, 5.2.1.1, 5.2.1, 5.2.1.rc1, 5.2.0, 5.2.0.rc2, 5.2.0.rc1, 5.2.0.beta2, 5.2.0.beta1, 5.1.7, 5.1.7.rc1, 5.1.6.2, 5.1.6.1, 5.1.6, 5.1.5, 5.1.5.rc1, 5.1.4, 5.1.4.rc1, 5.1.3, 5.1.3.rc3, 5.1.3.rc2, 5.1.3.rc1, 5.1.2, 5.1.2.rc1, 5.1.1, 5.1.0, 5.1.0.rc2, 5.1.0.rc1, 5.1.0.beta1, 5.0.7.2, 5.0.7.1, 5.0.7, 5.0.6, 5.0.6.rc1, 5.0.5, 5.0.5.rc2, 5.0.5.rc1, 5.0.4, 5.0.4.rc1, 5.0.3, 5.0.2, 5.0.2.rc1, 5.0.1, 5.0.1.rc2, 5.0.1.rc1, 5.0.0.1, 5.0.0, 5.0.0.rc2, 5.0.0.rc1, 5.0.0.racecar1, 5.0.0.beta4, 5.0.0.beta3, 5.0.0.beta2, 5.0.0.beta1.1, 5.0.0.beta1, 4.2.11.3, 4.2.11.2, 4.2.11.1, 4.2.11, 4.2.10, 4.2.10.rc1, 4.2.9, 4.2.9.rc2, 4.2.9.rc1, 4.2.8, 4.2.8.rc1, 4.2.7.1, 4.2.7, 4.2.7.rc1, 4.2.6, 4.2.6.rc1, 4.2.5.2, 4.2.5.1, 4.2.5, 4.2.5.rc2, 4.2.5.rc1, 4.2.4, 4.2.4.rc1, 4.2.3, 4.2.3.rc1, 4.2.2, 4.2.1, 4.2.1.rc4, 4.2.1.rc3, 4.2.1.rc2, 4.2.1.rc1, 4.2.0, 4.2.0.rc3, 4.2.0.rc2, 4.2.0.rc1, 4.2.0.beta4, 4.2.0.beta3, 4.2.0.beta2, 4.2.0.beta1, 4.1.16, 4.1.16.rc1, 4.1.15, 4.1.15.rc1, 4.1.14.2, 4.1.14.1, 4.1.14, 4.1.14.rc2, 4.1.14.rc1, 4.1.13, 4.1.13.rc1, 4.1.12, 4.1.12.rc1, 4.1.11, 4.1.10, 4.1.10.rc4, 4.1.10.rc3, 4.1.10.rc2, 4.1.10.rc1, 4.1.9, 4.1.9.rc1, 4.1.8, 4.1.7.1, 4.1.7, 4.1.6, 4.1.6.rc2, 4.1.6.rc1, 4.1.5, 4.1.4, 4.1.3, 4.1.2, 4.1.2.rc3, 4.1.2.rc2, 4.1.2.rc1, 4.1.1, 4.1.0, 4.1.0.rc2, 4.1.0.rc1, 4.1.0.beta2, 4.1.0.beta1, 4.0.13, 4.0.13.rc1, 4.0.12, 4.0.11.1, 4.0.11, 4.0.10, 4.0.10.rc2, 4.0.10.rc1, 4.0.9, 4.0.8, 4.0.7, 4.0.6, 4.0.6.rc3, 4.0.6.rc2, 4.0.6.rc1, 4.0.5, 4.0.4, 4.0.4.rc1, 4.0.3, 4.0.0.rc2, 4.0.0.rc1, 4.0.0.beta1, 3.2.22.5, 3.2.22.4, 3.2.22.3, 3.2.22.2, 3.2.22.1, 3.2.22, 3.2.21, 3.2.20, 3.2.19, 3.2.18, 3.2.17, 6.1.0.rc2, 6.1.0, 6.1.1, 6.1.2, 6.1.2.1, 6.0.3.5, 5.2.4.5, 6.1.3, 6.1.3.1, 6.0.3.6, 5.2.5, 6.1.3.2, 6.0.3.7, 5.2.6, 5.2.4.6, 6.0.4, 6.1.4, 6.1.4.1, 6.0.4.1, 7.0.0.alpha2, 7.0.0.alpha1, 7.0.0.rc1, 7.0.0.rc3, 7.0.0.rc2, 6.1.4.3, 6.1.4.2, 6.0.4.3, 6.0.4.2, 7.0.0, 6.1.4.4, 6.0.4.4, 7.0.1, 7.0.2, 7.0.2.2, 7.0.2.1, 6.1.4.6, 6.1.4.5, 6.0.4.6, 6.0.4.5, 5.2.6.2, 5.2.6.1, 6.0.4.7, 5.2.6.3, 7.0.2.3, 6.1.4.7, 6.1.5, 5.2.7, 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1, 7.0.3, 6.1.6, 6.0.5, 5.2.8, 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1, 7.0.4, 6.1.7, 6.0.6, 7.0.4.1, 6.1.7.1, 6.0.6.1, 7.0.4.2, 6.1.7.2, 7.0.4.3, 6.1.7.3, 7.0.5]
Recommendation:
Update to version 7.0.5.
445 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 3.2.4.rc1 | UNKNOWN | 1 | 2012-05-28 - 19:01 | about 11 years |
| 3.2.3 | UNKNOWN | 1 | 2012-03-30 - 22:26 | about 11 years |
| 3.2.3.rc2 | UNKNOWN | 1 | 2012-03-29 - 16:14 | about 11 years |
| 3.2.3.rc1 | UNKNOWN | 1 | 2012-03-27 - 17:11 | about 11 years |
| 3.2.2 | UNKNOWN | 1 | 2012-03-01 - 17:52 | over 11 years |
| 3.2.2.rc1 | UNKNOWN | 1 | 2012-02-22 - 21:39 | over 11 years |
| 3.2.1 | UNKNOWN | 1 | 2012-01-26 - 23:09 | over 11 years |
| 3.2.0 | UNKNOWN | 1 | 2012-01-20 - 16:47 | over 11 years |
| 3.2.0.rc2 | UNKNOWN | 1 | 2012-01-04 - 21:05 | over 11 years |
| 3.2.0.rc1 | UNKNOWN | 1 | 2011-12-20 - 00:41 | over 11 years |
| 3.1.12 | UNKNOWN | 2 | 2013-03-18 - 17:13 | about 10 years |
| 3.1.11 | UNKNOWN | 2 | 2013-02-11 - 18:17 | over 10 years |
| 3.1.10 | UNKNOWN | 2 | 2013-01-08 - 20:08 | over 10 years |
| 3.1.9 | UNKNOWN | 2 | 2013-01-02 - 21:19 | over 10 years |
| 3.1.8 | UNKNOWN | 2 | 2012-08-09 - 21:20 | almost 11 years |
| 3.1.7 | UNKNOWN | 2 | 2012-07-26 - 22:09 | almost 11 years |
| 3.1.6 | UNKNOWN | 2 | 2012-06-12 - 21:26 | almost 11 years |
| 3.1.5 | UNKNOWN | 2 | 2012-05-31 - 18:25 | about 11 years |
| 3.1.5.rc1 | UNKNOWN | 2 | 2012-05-28 - 19:01 | about 11 years |
| 3.1.4 | UNKNOWN | 2 | 2012-03-01 - 17:52 | over 11 years |
| 3.1.4.rc1 | UNKNOWN | 2 | 2012-02-22 - 21:39 | over 11 years |
| 3.1.3 | UNKNOWN | 2 | 2011-11-20 - 22:52 | over 11 years |
| 3.1.2 | UNKNOWN | 2 | 2011-11-18 - 01:33 | over 11 years |
| 3.1.2.rc2 | UNKNOWN | 3 | 2011-11-14 - 15:49 | over 11 years |
| 3.1.2.rc1 | UNKNOWN | 3 | 2011-11-14 - 14:17 | over 11 years |
| 3.1.1 | UNKNOWN | 3 | 2011-10-07 - 15:30 | over 11 years |
| 3.1.1.rc3 | UNKNOWN | 3 | 2011-10-06 - 02:31 | over 11 years |
| 3.1.1.rc2 | UNKNOWN | 3 | 2011-09-29 - 22:17 | over 11 years |
| 3.1.1.rc1 | UNKNOWN | 3 | 2011-09-15 - 00:27 | over 11 years |
| 3.1.0 | UNKNOWN | 3 | 2011-08-31 - 02:18 | almost 12 years |
| 3.1.0.rc8 | UNKNOWN | 2 | 2011-08-29 - 03:27 | almost 12 years |
| 3.1.0.rc6 | UNKNOWN | 2 | 2011-08-16 - 22:33 | almost 12 years |
| 3.1.0.rc5 | UNKNOWN | 2 | 2011-07-25 - 23:05 | almost 12 years |
| 3.1.0.rc4 | UNKNOWN | 2 | 2011-06-09 - 22:56 | almost 12 years |
| 3.1.0.rc3 | UNKNOWN | 2 | 2011-06-08 - 21:27 | almost 12 years |
| 3.1.0.rc2 | UNKNOWN | 2 | 2011-06-08 - 00:16 | almost 12 years |
| 3.1.0.rc1 | UNKNOWN | 2 | 2011-05-22 - 02:26 | about 12 years |
| 3.1.0.beta1 | UNKNOWN | 2 | 2011-05-05 - 01:23 | about 12 years |
| 3.0.20 | UNKNOWN | 2 | 2013-01-28 - 21:01 | over 10 years |
| 3.0.19 | UNKNOWN | 2 | 2013-01-08 - 20:08 | over 10 years |
| 3.0.18 | UNKNOWN | 2 | 2013-01-02 - 21:19 | over 10 years |
| 3.0.17 | UNKNOWN | 2 | 2012-08-09 - 21:16 | almost 11 years |
| 3.0.16 | UNKNOWN | 2 | 2012-07-26 - 22:08 | almost 11 years |
| 3.0.15 | UNKNOWN | 2 | 2012-06-13 - 03:07 | almost 11 years |
| 3.0.14 | UNKNOWN | 2 | 2012-06-12 - 21:26 | almost 11 years |
| 3.0.13 | UNKNOWN | 2 | 2012-05-31 - 18:24 | about 11 years |
| 3.0.13.rc1 | UNKNOWN | 2 | 2012-05-28 - 19:01 | about 11 years |
| 3.0.12 | UNKNOWN | 2 | 2012-03-01 - 17:52 | over 11 years |
| 3.0.12.rc1 | UNKNOWN | 2 | 2012-02-22 - 21:39 | over 11 years |
| 3.0.11 | UNKNOWN | 2 | 2011-11-18 - 01:23 | over 11 years |
| 3.0.10 | UNKNOWN | 3 | 2011-08-16 - 22:14 | almost 12 years |
| 3.0.10.rc1 | UNKNOWN | 3 | 2011-08-05 - 00:12 | almost 12 years |
| 3.0.9 | UNKNOWN | 3 | 2011-06-16 - 10:05 | almost 12 years |
| 3.0.9.rc5 | UNKNOWN | 3 | 2011-06-12 - 21:30 | almost 12 years |
| 3.0.9.rc4 | UNKNOWN | 3 | 2011-06-12 - 21:24 | almost 12 years |
| 3.0.9.rc3 | UNKNOWN | 3 | 2011-06-09 - 22:51 | almost 12 years |
| 3.0.9.rc1 | UNKNOWN | 3 | 2011-06-08 - 21:20 | almost 12 years |
| 3.0.8 | UNKNOWN | 3 | 2011-06-08 - 00:16 | almost 12 years |
| 3.0.8.rc4 | UNKNOWN | 3 | 2011-05-31 - 00:08 | about 12 years |
| 3.0.8.rc2 | UNKNOWN | 3 | 2011-05-27 - 16:32 | about 12 years |
| 3.0.8.rc1 | UNKNOWN | 3 | 2011-05-26 - 00:11 | about 12 years |
| 3.0.7 | UNKNOWN | 3 | 2011-04-18 - 21:05 | about 12 years |
| 3.0.7.rc2 | UNKNOWN | 4 | 2011-04-15 - 17:33 | about 12 years |
| 3.0.7.rc1 | UNKNOWN | 4 | 2011-04-14 - 21:57 | about 12 years |
| 3.0.6 | UNKNOWN | 4 | 2011-04-05 - 23:05 | about 12 years |
| 3.0.6.rc2 | UNKNOWN | 5 | 2011-03-31 - 05:28 | about 12 years |
| 3.0.6.rc1 | UNKNOWN | 5 | 2011-03-29 - 20:47 | about 12 years |
| 3.0.5 | UNKNOWN | 5 | 2011-02-27 - 02:30 | over 12 years |
| 3.0.5.rc1 | UNKNOWN | 5 | 2011-02-23 - 19:08 | over 12 years |
| 3.0.4 | UNKNOWN | 5 | 2011-02-08 - 21:17 | over 12 years |
| 3.0.4.rc1 | UNKNOWN | 7 | 2011-01-30 - 23:00 | over 12 years |
| 3.0.3 | UNKNOWN | 7 | 2010-11-16 - 16:29 | over 12 years |
| 3.0.2 | UNKNOWN | 7 | 2010-11-15 - 19:33 | over 12 years |
| 3.0.1 | UNKNOWN | 7 | 2010-10-14 - 20:55 | over 12 years |
| 3.0.0 | UNKNOWN | 8 | 2010-08-29 - 23:11 | almost 13 years |
| 3.0.0.rc2 | UNKNOWN | 2 | 2010-08-24 - 03:04 | almost 13 years |
| 3.0.0.rc | UNKNOWN | 2 | 2010-07-26 - 21:43 | almost 13 years |
| 3.0.0.beta4 | UNKNOWN | 2 | 2010-06-08 - 22:33 | almost 13 years |
| 3.0.0.beta3 | UNKNOWN | 2 | 2010-04-13 - 19:23 | about 13 years |
| 3.0.0.beta2 | UNKNOWN | 2 | 2010-04-01 - 21:26 | about 13 years |
| 3.0.0.beta | UNKNOWN | 2 | 2010-02-05 - 03:02 | over 13 years |
| 2.3.18 | UNKNOWN | 2 | 2013-03-18 - 17:13 | about 10 years |
| 2.3.17 | UNKNOWN | 2 | 2013-02-11 - 18:17 | over 10 years |
| 2.3.16 | UNKNOWN | 2 | 2013-01-28 - 21:01 | over 10 years |
| 2.3.15 | UNKNOWN | 2 | 2013-01-08 - 20:08 | over 10 years |
| 2.3.14 | UNKNOWN | 2 | 2011-08-16 - 22:01 | almost 12 years |
| 2.3.12 | UNKNOWN | 2 | 2011-06-08 - 00:22 | almost 12 years |
| 2.3.11 | UNKNOWN | 2 | 2011-02-08 - 21:17 | over 12 years |
| 2.3.10 | UNKNOWN | 5 | 2010-10-14 - 20:53 | over 12 years |
| 2.3.9 | UNKNOWN | 6 | 2010-09-04 - 21:54 | almost 13 years |
| 2.3.9.pre | UNKNOWN | 5 | 2010-08-30 - 03:32 | almost 13 years |
| 2.3.8 | UNKNOWN | 5 | 2010-05-25 - 04:53 | about 13 years |
| 2.3.8.pre1 | UNKNOWN | 5 | 2010-05-24 - 21:17 | about 13 years |
| 2.3.7 | UNKNOWN | 5 | 2010-05-24 - 08:23 | about 13 years |
| 2.3.6 | UNKNOWN | 5 | 2010-05-23 - 07:49 | about 13 years |
| 2.3.5 | UNKNOWN | 5 | 2009-11-27 - 00:12 | over 13 years |
| 2.3.4 | UNKNOWN | 7 | 2009-09-04 - 17:33 | almost 14 years |
| 2.3.3 | UNKNOWN | 9 | 2009-08-05 - 13:21 | almost 14 years |
| 2.3.2 | UNKNOWN | 11 | 2009-07-25 - 18:01 | almost 14 years |
| 2.2.3 | UNKNOWN | 7 | 2009-09-28 - 09:25 | over 13 years |