Skip to content
Threat Feed
Subscribe

Product

Ruby on Rails < 1.7.1

1 brief RSS
high threat

Vulnerability in Ruby on Rails Allows Remote Indirect Code Injection (XSS)

A cross-site scripting (XSS) vulnerability has been discovered in Ruby on Rails versions prior to 1.7.1, enabling a remote attacker to perform an indirect remote code injection, allowing malicious scripts to be executed in the client's browser.

exploited Ruby on Rails < 1.7.1 xss web-vulnerability ruby-on-rails cross-site-scripting
1t 1i