CVE-2013-1855 | BDVDB-2026-55045 Detail
Description#
The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html
- https://groups.google.com/group/rubyonrails-security/msg/8ed835a97cdd1afd?dmode=source&output=gplain
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00013.html
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00073.html
- http://support.apple.com/kb/HT5784
- http://rhn.redhat.com/errata/RHSA-2013-0698.html
- http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00072.html
- http://rhn.redhat.com/errata/RHSA-2014-1863.html
- http://weblog.rubyonrails.org/2013/3/18/SEC-ANN-Rails-3-2-13-3-1-12-and-2-3-18-have-been-released/
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.