Cross-Site Scripting Vulnerability in Ruby on Rails Framework
CVE-2012-3463
Currently unrated
What is CVE-2012-3463?
A cross-site scripting vulnerability exists in Ruby on Rails framework, specifically in the actionpack/lib/action_view/helpers/form_tag_helper.rb file. This issue affects versions of Ruby on Rails 3.x prior to 3.0.17, 3.1.x prior to 3.1.8, and 3.2.x prior to 3.2.8. Attackers can exploit this vulnerability to inject arbitrary web scripts or HTML through the prompt field of the select_tag helper, potentially compromising the integrity of web applications that utilize this feature.