Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:48:50 +0000 certa-2013-avi-193 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Ruby on Rails</span>. Elles permettent à un att… https://cve.radiocsirt.org/vuln/certa-2013-avi-193 certa-2013-avi-193 https://cve.radiocsirt.org/vuln/certa-2013-avi-193 EUVD-2026-105686 https://cve.radiocsirt.org/vuln/euvd-2026-105686 EUVD-2026-105686 https://cve.radiocsirt.org/vuln/euvd-2026-105686 fkie_cve-2013-1855 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1855 <p>The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.</p> <p>The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1855 GHSA-q759-hwvc-m3jg — actionpack Cross-site Scripting vulnerability https://cve.radiocsirt.org/vuln/ghsa-q759-hwvc-m3jg <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>The `sanitize_css` method in `lib/action_controller/vendor/html-scanner/html/sanitizer.rb` in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle `\n` (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.</p> <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>The `sanitize_css` method in `lib/action_controller/vendor/html-scanner/html/sanitizer.rb` in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle `\n` (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.</p> https://cve.radiocsirt.org/vuln/ghsa-q759-hwvc-m3jg gsd-2013-1855 https://cve.radiocsirt.org/vuln/gsd-2013-1855 gsd-2013-1855 https://cve.radiocsirt.org/vuln/gsd-2013-1855 RHSA-2013:0698 — Red Hat Security Advisory: rubygem-actionpack and ruby193-rubygem-actionpack security update https://cve.radiocsirt.org/vuln/rhsa-2013:0698 <p>rubygem-actionpack: css_sanitization: XSS vulnerability in sanitize_css rubygem-actionpack: sanitize_protocol: XSS Vulnerability in the helper of Ruby on Rails</p> <p>rubygem-actionpack: css_sanitization: XSS vulnerability in sanitize_css rubygem-actionpack: sanitize_protocol: XSS Vulnerability in the helper of Ruby on Rails</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0698