CVE-2011-4319
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Cross-site scripting (XSS) vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the rails_xss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string whose name ends with an "html" substring.
Una vulnerabilidad de ejecución de comandos en sitios cruzados en el método de ayuda de las traducciones i18n en Ruby on Rails v3.0.x antes de v3.0.11 y v3.1.x antes de v3.1.2 y el complemento rails_xss en Ruby on Rails v2.3.x, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores relacionados con una cadena de traducciones cuyo nombre termina con la subcadena "html".
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-11-04 CVE Reserved
- 2011-11-28 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (9)
URL | Tag | Source |
---|---|---|
http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b61d70fb73c7cc5?pli=1 | X_refsource_confirm | |
http://groups.google.com/group/rubyonrails-security/msg/c65c24fbc4b6dd82?dmode=source&output=gplain | Mailing List | |
http://openwall.com/lists/oss-security/2011/11/18/8 | Mailing List | |
http://osvdb.org/77199 | Vdb Entry | |
http://weblog.rubyonrails.org/2011/11/18/rails-3-0-11-has-been-released | X_refsource_confirm | |
http://weblog.rubyonrails.org/2011/11/18/rails-3-1-2-has-been-released | X_refsource_confirm | |
http://www.securityfocus.com/bid/50722 | Vdb Entry | |
http://www.securitytracker.com/id?1026342 | Vdb Entry | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/71364 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | beta |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | beta2 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | beta3 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | beta4 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | rc |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | rc2 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.1 Search vendor "Rubyonrails" for product "Rails" and version "3.0.1" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.1 Search vendor "Rubyonrails" for product "Rails" and version "3.0.1" | pre |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.2 Search vendor "Rubyonrails" for product "Rails" and version "3.0.2" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.2 Search vendor "Rubyonrails" for product "Rails" and version "3.0.2" | pre |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.3 Search vendor "Rubyonrails" for product "Rails" and version "3.0.3" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.4 Search vendor "Rubyonrails" for product "Rails" and version "3.0.4" | rc1 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.5 Search vendor "Rubyonrails" for product "Rails" and version "3.0.5" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.5 Search vendor "Rubyonrails" for product "Rails" and version "3.0.5" | rc1 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6" | rc1 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6" | rc2 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7" | rc1 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7" | rc2 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | rc1 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | rc2 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | rc3 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | rc4 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc1 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc2 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc3 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc4 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc5 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.10 Search vendor "Rubyonrails" for product "Rails" and version "3.0.10" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.10 Search vendor "Rubyonrails" for product "Rails" and version "3.0.10" | rc1 |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails" | 3.0.4 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "3.0.4" | - |
Safe
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | beta |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | beta2 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | beta3 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | beta4 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | rc |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0" | rc2 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.1 Search vendor "Rubyonrails" for product "Rails" and version "3.0.1" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.1 Search vendor "Rubyonrails" for product "Rails" and version "3.0.1" | pre |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.2 Search vendor "Rubyonrails" for product "Rails" and version "3.0.2" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.2 Search vendor "Rubyonrails" for product "Rails" and version "3.0.2" | pre |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.3 Search vendor "Rubyonrails" for product "Rails" and version "3.0.3" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.4 Search vendor "Rubyonrails" for product "Rails" and version "3.0.4" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.5 Search vendor "Rubyonrails" for product "Rails" and version "3.0.5" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.5 Search vendor "Rubyonrails" for product "Rails" and version "3.0.5" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6" | rc2 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7" | rc2 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | rc2 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | rc3 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8" | rc4 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc2 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc3 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc4 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9" | rc5 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.10 Search vendor "Rubyonrails" for product "Rails" and version "3.0.10" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.0.10 Search vendor "Rubyonrails" for product "Rails" and version "3.0.10" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails" | 3.0.4 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "3.0.4" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | beta1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | rc2 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | rc3 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | rc4 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | rc5 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | rc6 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | rc7 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0" | rc8 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.1 Search vendor "Rubyonrails" for product "Rails" and version "3.1.1" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.1 Search vendor "Rubyonrails" for product "Rails" and version "3.1.1" | rc1 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.1 Search vendor "Rubyonrails" for product "Rails" and version "3.1.1" | rc2 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 3.1.1 Search vendor "Rubyonrails" for product "Rails" and version "3.1.1" | rc3 |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 2.3.2 Search vendor "Rubyonrails" for product "Rails" and version "2.3.2" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 2.3.3 Search vendor "Rubyonrails" for product "Rails" and version "2.3.3" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 2.3.4 Search vendor "Rubyonrails" for product "Rails" and version "2.3.4" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 2.3.9 Search vendor "Rubyonrails" for product "Rails" and version "2.3.9" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 2.3.10 Search vendor "Rubyonrails" for product "Rails" and version "2.3.10" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 2.3.11 Search vendor "Rubyonrails" for product "Rails" and version "2.3.11" | - |
Affected
| ||||||
Rubyonrails Search vendor "Rubyonrails" | Rails Search vendor "Rubyonrails" for product "Rails" | 2.3.12 Search vendor "Rubyonrails" for product "Rails" and version "2.3.12" | - |
Affected
|