Cross-Site Scripting Vulnerability in Ruby on Rails by Ruby
CVE-2012-3465

Currently unrated

Key Information:

Vendor: Rubyonrails
Status: Ruby On Rails; Rails
Vendor: CVE Published:; 10 August 2012

🔔 Create Rubyonrails Vulnerability Alert

What is CVE-2012-3465?

A cross-site scripting (XSS) vulnerability exists in the strip_tags helper within the sanitize_helper.rb file of Ruby on Rails versions prior to 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8. This flaw allows remote attackers to exploit malformed HTML markup, potentially injecting arbitrary web scripts or HTML, compromising the security of affected applications. Users are advised to upgrade to the latest versions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch