CVE-2013-1855

rubygem-actionpack: css_sanitization: XSS vulnerability in sanitize_css

Severity Score

6.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle
(newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.

El método sanitize_css en lib/action_controller/vendor/html-scanner/html/sanitizer.rb en el componente Action Pack en Ruby on Rails anterior a v2.3.18, v3.0.x y v3.1.x anterior a v3.1.12, y v3.2.x anterior a v3.2.13, no menaja adecuadamente los caracteres
(nueva línea), lo que facilita a atacantes remotos llevar a cabo ataques XSS a través de secuencias CSS.

A cross-site scripting (XSS) flaw was found in Action Pack. A remote attacker could use this flaw to conduct XSS attacks against users of an application using Action Pack.

Red Hat Subscription Asset Manager acts as a proxy for handling subscription information and software updates on client machines. Red Hat Subscription Asset Manager is built on Ruby on Rails, a model-view-controller framework for web application development. Action Pack implements the controller and the view components. A directory traversal flaw was found in the way Ruby on Rails handled wildcard segments in routes with implicit rendering. A remote attacker could use this flaw to retrieve arbitrary local files accessible to a Ruby on Rails application using the aforementioned routes via a specially crafted request.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-02-19 CVE Reserved
2013-03-19 CVE Published
2024-08-06 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (12)

URL	Tag	Source
http://support.apple.com/kb/HT5784	X_refsource_confirm
http://weblog.rubyonrails.org/2013/3/18/SEC-ANN-Rails-3-2-13-3-1-12-and-2-3-18-have-been-released	X_refsource_confirm
https://groups.google.com/group/rubyonrails-security/msg/8ed835a97cdd1afd?dmode=source&output=gplain	Mailing List

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html	2023-02-13
http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html	2023-02-13
http://lists.opensuse.org/opensuse-updates/2013-04/msg00072.html	2023-02-13
http://lists.opensuse.org/opensuse-updates/2013-04/msg00073.html	2023-02-13
http://lists.opensuse.org/opensuse-updates/2014-01/msg00013.html	2023-02-13
http://rhn.redhat.com/errata/RHSA-2013-0698.html	2023-02-13
http://rhn.redhat.com/errata/RHSA-2014-1863.html	2023-02-13
https://access.redhat.com/security/cve/CVE-2013-1855	2014-11-17
https://bugzilla.redhat.com/show_bug.cgi?id=921331	2014-11-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.0 Search vendor "Rubyonrails" for product "Rails" and version "3.2.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.0 Search vendor "Rubyonrails" for product "Rails" and version "3.2.0"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.0 Search vendor "Rubyonrails" for product "Rails" and version "3.2.0"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.1 Search vendor "Rubyonrails" for product "Rails" and version "3.2.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.2 Search vendor "Rubyonrails" for product "Rails" and version "3.2.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.2 Search vendor "Rubyonrails" for product "Rails" and version "3.2.2"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.3 Search vendor "Rubyonrails" for product "Rails" and version "3.2.3"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.3 Search vendor "Rubyonrails" for product "Rails" and version "3.2.3"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.3 Search vendor "Rubyonrails" for product "Rails" and version "3.2.3"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.4 Search vendor "Rubyonrails" for product "Rails" and version "3.2.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.4 Search vendor "Rubyonrails" for product "Rails" and version "3.2.4"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.5 Search vendor "Rubyonrails" for product "Rails" and version "3.2.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.6 Search vendor "Rubyonrails" for product "Rails" and version "3.2.6"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.7 Search vendor "Rubyonrails" for product "Rails" and version "3.2.7"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.8 Search vendor "Rubyonrails" for product "Rails" and version "3.2.8"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.9 Search vendor "Rubyonrails" for product "Rails" and version "3.2.9"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.10 Search vendor "Rubyonrails" for product "Rails" and version "3.2.10"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.11 Search vendor "Rubyonrails" for product "Rails" and version "3.2.11"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.2.12 Search vendor "Rubyonrails" for product "Rails" and version "3.2.12"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.9.1 Search vendor "Rubyonrails" for product "Rails" and version "0.9.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.9.2 Search vendor "Rubyonrails" for product "Rails" and version "0.9.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.9.3 Search vendor "Rubyonrails" for product "Rails" and version "0.9.3"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.9.4 Search vendor "Rubyonrails" for product "Rails" and version "0.9.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.9.4.1 Search vendor "Rubyonrails" for product "Rails" and version "0.9.4.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.10.0 Search vendor "Rubyonrails" for product "Rails" and version "0.10.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.10.1 Search vendor "Rubyonrails" for product "Rails" and version "0.10.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.11.0 Search vendor "Rubyonrails" for product "Rails" and version "0.11.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.11.1 Search vendor "Rubyonrails" for product "Rails" and version "0.11.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.12.0 Search vendor "Rubyonrails" for product "Rails" and version "0.12.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.12.1 Search vendor "Rubyonrails" for product "Rails" and version "0.12.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.13.0 Search vendor "Rubyonrails" for product "Rails" and version "0.13.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.13.1 Search vendor "Rubyonrails" for product "Rails" and version "0.13.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.14.1 Search vendor "Rubyonrails" for product "Rails" and version "0.14.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.14.2 Search vendor "Rubyonrails" for product "Rails" and version "0.14.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.14.3 Search vendor "Rubyonrails" for product "Rails" and version "0.14.3"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				0.14.4 Search vendor "Rubyonrails" for product "Rails" and version "0.14.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.0.0 Search vendor "Rubyonrails" for product "Rails" and version "1.0.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.1.0 Search vendor "Rubyonrails" for product "Rails" and version "1.1.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.1.1 Search vendor "Rubyonrails" for product "Rails" and version "1.1.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.1.2 Search vendor "Rubyonrails" for product "Rails" and version "1.1.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.1.3 Search vendor "Rubyonrails" for product "Rails" and version "1.1.3"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.1.4 Search vendor "Rubyonrails" for product "Rails" and version "1.1.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.1.5 Search vendor "Rubyonrails" for product "Rails" and version "1.1.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.1.6 Search vendor "Rubyonrails" for product "Rails" and version "1.1.6"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.2.0 Search vendor "Rubyonrails" for product "Rails" and version "1.2.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.2.1 Search vendor "Rubyonrails" for product "Rails" and version "1.2.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.2.2 Search vendor "Rubyonrails" for product "Rails" and version "1.2.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.2.3 Search vendor "Rubyonrails" for product "Rails" and version "1.2.3"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.2.4 Search vendor "Rubyonrails" for product "Rails" and version "1.2.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.2.5 Search vendor "Rubyonrails" for product "Rails" and version "1.2.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.2.6 Search vendor "Rubyonrails" for product "Rails" and version "1.2.6"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				1.9.5 Search vendor "Rubyonrails" for product "Rails" and version "1.9.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.0.0 Search vendor "Rubyonrails" for product "Rails" and version "2.0.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.0.0 Search vendor "Rubyonrails" for product "Rails" and version "2.0.0"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.0.0 Search vendor "Rubyonrails" for product "Rails" and version "2.0.0"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.0.1 Search vendor "Rubyonrails" for product "Rails" and version "2.0.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.0.2 Search vendor "Rubyonrails" for product "Rails" and version "2.0.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.0.4 Search vendor "Rubyonrails" for product "Rails" and version "2.0.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.1.0 Search vendor "Rubyonrails" for product "Rails" and version "2.1.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.1.1 Search vendor "Rubyonrails" for product "Rails" and version "2.1.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.1.2 Search vendor "Rubyonrails" for product "Rails" and version "2.1.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.2.0 Search vendor "Rubyonrails" for product "Rails" and version "2.2.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.2.1 Search vendor "Rubyonrails" for product "Rails" and version "2.2.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.2.2 Search vendor "Rubyonrails" for product "Rails" and version "2.2.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.0 Search vendor "Rubyonrails" for product "Rails" and version "2.3.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.1 Search vendor "Rubyonrails" for product "Rails" and version "2.3.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.2 Search vendor "Rubyonrails" for product "Rails" and version "2.3.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.3 Search vendor "Rubyonrails" for product "Rails" and version "2.3.3"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.4 Search vendor "Rubyonrails" for product "Rails" and version "2.3.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.9 Search vendor "Rubyonrails" for product "Rails" and version "2.3.9"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.10 Search vendor "Rubyonrails" for product "Rails" and version "2.3.10"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.11 Search vendor "Rubyonrails" for product "Rails" and version "2.3.11"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.12 Search vendor "Rubyonrails" for product "Rails" and version "2.3.12"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.13 Search vendor "Rubyonrails" for product "Rails" and version "2.3.13"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.14 Search vendor "Rubyonrails" for product "Rails" and version "2.3.14"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.15 Search vendor "Rubyonrails" for product "Rails" and version "2.3.15"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				2.3.16 Search vendor "Rubyonrails" for product "Rails" and version "2.3.16"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				<= 2.3.17 Search vendor "Rubyonrails" for product "Ruby On Rails" and version " <= 2.3.17"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.5.0 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.5.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.5.5 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.5.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.5.6 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.5.6"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.5.7 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.5.7"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.6.0 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.6.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.6.5 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.6.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.7.0 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.7.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.8.0 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.8.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.8.5 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.8.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				0.9.0 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "0.9.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0"		beta		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0"		beta2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0"		beta3		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0"		beta4		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0"		rc		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.0 Search vendor "Rubyonrails" for product "Rails" and version "3.0.0"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.1 Search vendor "Rubyonrails" for product "Rails" and version "3.0.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.1 Search vendor "Rubyonrails" for product "Rails" and version "3.0.1"		pre		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.2 Search vendor "Rubyonrails" for product "Rails" and version "3.0.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.2 Search vendor "Rubyonrails" for product "Rails" and version "3.0.2"		pre		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.3 Search vendor "Rubyonrails" for product "Rails" and version "3.0.3"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.4 Search vendor "Rubyonrails" for product "Rails" and version "3.0.4"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.5 Search vendor "Rubyonrails" for product "Rails" and version "3.0.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.5 Search vendor "Rubyonrails" for product "Rails" and version "3.0.5"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.6 Search vendor "Rubyonrails" for product "Rails" and version "3.0.6"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.7 Search vendor "Rubyonrails" for product "Rails" and version "3.0.7"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8"		rc3		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.8 Search vendor "Rubyonrails" for product "Rails" and version "3.0.8"		rc4		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9"		rc3		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9"		rc4		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.9 Search vendor "Rubyonrails" for product "Rails" and version "3.0.9"		rc5		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.10 Search vendor "Rubyonrails" for product "Rails" and version "3.0.10"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.10 Search vendor "Rubyonrails" for product "Rails" and version "3.0.10"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.11 Search vendor "Rubyonrails" for product "Rails" and version "3.0.11"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.12 Search vendor "Rubyonrails" for product "Rails" and version "3.0.12"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.12 Search vendor "Rubyonrails" for product "Rails" and version "3.0.12"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.13 Search vendor "Rubyonrails" for product "Rails" and version "3.0.13"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.13 Search vendor "Rubyonrails" for product "Rails" and version "3.0.13"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.14 Search vendor "Rubyonrails" for product "Rails" and version "3.0.14"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.16 Search vendor "Rubyonrails" for product "Rails" and version "3.0.16"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.17 Search vendor "Rubyonrails" for product "Rails" and version "3.0.17"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.18 Search vendor "Rubyonrails" for product "Rails" and version "3.0.18"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.19 Search vendor "Rubyonrails" for product "Rails" and version "3.0.19"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.0.20 Search vendor "Rubyonrails" for product "Rails" and version "3.0.20"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				3.0.4 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "3.0.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		beta1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		rc3		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		rc4		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		rc5		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		rc6		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		rc7		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.0 Search vendor "Rubyonrails" for product "Rails" and version "3.1.0"		rc8		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.1 Search vendor "Rubyonrails" for product "Rails" and version "3.1.1"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.1 Search vendor "Rubyonrails" for product "Rails" and version "3.1.1"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.1 Search vendor "Rubyonrails" for product "Rails" and version "3.1.1"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.1 Search vendor "Rubyonrails" for product "Rails" and version "3.1.1"		rc3		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.2 Search vendor "Rubyonrails" for product "Rails" and version "3.1.2"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.2 Search vendor "Rubyonrails" for product "Rails" and version "3.1.2"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.2 Search vendor "Rubyonrails" for product "Rails" and version "3.1.2"		rc2		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.3 Search vendor "Rubyonrails" for product "Rails" and version "3.1.3"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.4 Search vendor "Rubyonrails" for product "Rails" and version "3.1.4"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.4 Search vendor "Rubyonrails" for product "Rails" and version "3.1.4"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.5 Search vendor "Rubyonrails" for product "Rails" and version "3.1.5"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.5 Search vendor "Rubyonrails" for product "Rails" and version "3.1.5"		rc1		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.6 Search vendor "Rubyonrails" for product "Rails" and version "3.1.6"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.7 Search vendor "Rubyonrails" for product "Rails" and version "3.1.7"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.8 Search vendor "Rubyonrails" for product "Rails" and version "3.1.8"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.9 Search vendor "Rubyonrails" for product "Rails" and version "3.1.9"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Rails Search vendor "Rubyonrails" for product "Rails"				3.1.10 Search vendor "Rubyonrails" for product "Rails" and version "3.1.10"		-		Affected
Rubyonrails Search vendor "Rubyonrails"		Ruby On Rails Search vendor "Rubyonrails" for product "Ruby On Rails"				3.1.11 Search vendor "Rubyonrails" for product "Ruby On Rails" and version "3.1.11"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				6.0 Search vendor "Redhat" for product "Enterprise Linux" and version "6.0"		-		Affected