CVE-2011-1497

State: Published
Severity: Not scored
Published: Oct 19, 2021
Updated: Aug 6, 2024
Reserved: Mar 21, 2011

Read the record on cve.org

Description

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

Scores

The record has no CVSS score.

Weaknesses

CWE-79

Affected Products

Product	Versions
railsn/a	rails 3.0.6Affected

References

https://www.openwall.com/lists/oss-security/2011/04/06/13
https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.