CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1855

The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.2%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-1855

Rubyonrails » Rails » Version: 0.10.0

cpe:2.3:a:rubyonrails:rails:0.10.0
Rubyonrails » Rails » Version: 0.10.1

cpe:2.3:a:rubyonrails:rails:0.10.1
Rubyonrails » Rails » Version: 0.11.0

cpe:2.3:a:rubyonrails:rails:0.11.0
Rubyonrails » Rails » Version: 0.11.1

cpe:2.3:a:rubyonrails:rails:0.11.1
Rubyonrails » Rails » Version: 0.12.0

cpe:2.3:a:rubyonrails:rails:0.12.0
Rubyonrails » Rails » Version: 0.12.1

cpe:2.3:a:rubyonrails:rails:0.12.1
Rubyonrails » Rails » Version: 0.13.0

cpe:2.3:a:rubyonrails:rails:0.13.0
Rubyonrails » Rails » Version: 0.13.1

cpe:2.3:a:rubyonrails:rails:0.13.1
Rubyonrails » Rails » Version: 0.14.1

cpe:2.3:a:rubyonrails:rails:0.14.1
Rubyonrails » Rails » Version: 0.14.2

cpe:2.3:a:rubyonrails:rails:0.14.2
Rubyonrails » Rails » Version: 0.14.3

cpe:2.3:a:rubyonrails:rails:0.14.3
Rubyonrails » Rails » Version: 0.14.4

cpe:2.3:a:rubyonrails:rails:0.14.4
Rubyonrails » Rails » Version: 0.9.1

cpe:2.3:a:rubyonrails:rails:0.9.1
Rubyonrails » Rails » Version: 0.9.2

cpe:2.3:a:rubyonrails:rails:0.9.2
Rubyonrails » Rails » Version: 0.9.3

cpe:2.3:a:rubyonrails:rails:0.9.3
Rubyonrails » Rails » Version: 0.9.4

cpe:2.3:a:rubyonrails:rails:0.9.4
Rubyonrails » Rails » Version: 0.9.4.1

cpe:2.3:a:rubyonrails:rails:0.9.4.1
Rubyonrails » Rails » Version: 1.0.0

cpe:2.3:a:rubyonrails:rails:1.0.0
Rubyonrails » Rails » Version: 1.1.0

cpe:2.3:a:rubyonrails:rails:1.1.0
Rubyonrails » Rails » Version: 1.1.1

cpe:2.3:a:rubyonrails:rails:1.1.1
Rubyonrails » Rails » Version: 1.1.2

cpe:2.3:a:rubyonrails:rails:1.1.2
Rubyonrails » Rails » Version: 1.1.3

cpe:2.3:a:rubyonrails:rails:1.1.3
Rubyonrails » Rails » Version: 1.1.4

cpe:2.3:a:rubyonrails:rails:1.1.4
Rubyonrails » Rails » Version: 1.1.5

cpe:2.3:a:rubyonrails:rails:1.1.5
Rubyonrails » Rails » Version: 1.1.6

cpe:2.3:a:rubyonrails:rails:1.1.6
Rubyonrails » Rails » Version: 1.2.0

cpe:2.3:a:rubyonrails:rails:1.2.0
Rubyonrails » Rails » Version: 1.2.1

cpe:2.3:a:rubyonrails:rails:1.2.1
Rubyonrails » Rails » Version: 1.2.2

cpe:2.3:a:rubyonrails:rails:1.2.2
Rubyonrails » Rails » Version: 1.2.3

cpe:2.3:a:rubyonrails:rails:1.2.3
Rubyonrails » Rails » Version: 1.2.4

cpe:2.3:a:rubyonrails:rails:1.2.4
Rubyonrails » Rails » Version: 1.2.5

cpe:2.3:a:rubyonrails:rails:1.2.5
Rubyonrails » Rails » Version: 1.2.6

cpe:2.3:a:rubyonrails:rails:1.2.6
Rubyonrails » Rails » Version: 1.9.5

cpe:2.3:a:rubyonrails:rails:1.9.5
Rubyonrails » Rails » Version: 2.0.0

cpe:2.3:a:rubyonrails:rails:2.0.0
Rubyonrails » Rails » Version: 2.0.1

cpe:2.3:a:rubyonrails:rails:2.0.1
Rubyonrails » Rails » Version: 2.0.2

cpe:2.3:a:rubyonrails:rails:2.0.2
Rubyonrails » Rails » Version: 2.0.4

cpe:2.3:a:rubyonrails:rails:2.0.4
Rubyonrails » Rails » Version: 2.1.0

cpe:2.3:a:rubyonrails:rails:2.1.0
Rubyonrails » Rails » Version: 2.1.1

cpe:2.3:a:rubyonrails:rails:2.1.1
Rubyonrails » Rails » Version: 2.1.2

cpe:2.3:a:rubyonrails:rails:2.1.2
Rubyonrails » Rails » Version: 2.2.0

cpe:2.3:a:rubyonrails:rails:2.2.0
Rubyonrails » Rails » Version: 2.2.1

cpe:2.3:a:rubyonrails:rails:2.2.1
Rubyonrails » Rails » Version: 2.2.2

cpe:2.3:a:rubyonrails:rails:2.2.2
Rubyonrails » Rails » Version: 2.3.0

cpe:2.3:a:rubyonrails:rails:2.3.0
Rubyonrails » Rails » Version: 2.3.1

cpe:2.3:a:rubyonrails:rails:2.3.1
Rubyonrails » Rails » Version: 2.3.10

cpe:2.3:a:rubyonrails:rails:2.3.10
Rubyonrails » Rails » Version: 2.3.11

cpe:2.3:a:rubyonrails:rails:2.3.11
Rubyonrails » Rails » Version: 2.3.12

cpe:2.3:a:rubyonrails:rails:2.3.12
Rubyonrails » Rails » Version: 2.3.13

cpe:2.3:a:rubyonrails:rails:2.3.13
Rubyonrails » Rails » Version: 2.3.14

cpe:2.3:a:rubyonrails:rails:2.3.14
Rubyonrails » Rails » Version: 2.3.15

cpe:2.3:a:rubyonrails:rails:2.3.15
Rubyonrails » Rails » Version: 2.3.16

cpe:2.3:a:rubyonrails:rails:2.3.16
Rubyonrails » Rails » Version: 2.3.2

cpe:2.3:a:rubyonrails:rails:2.3.2
Rubyonrails » Rails » Version: 2.3.3

cpe:2.3:a:rubyonrails:rails:2.3.3
Rubyonrails » Rails » Version: 2.3.4

cpe:2.3:a:rubyonrails:rails:2.3.4
Rubyonrails » Rails » Version: 2.3.9

cpe:2.3:a:rubyonrails:rails:2.3.9
Rubyonrails » Rails » Version: 3.0.0

cpe:2.3:a:rubyonrails:rails:3.0.0
Rubyonrails » Rails » Version: 3.0.1

cpe:2.3:a:rubyonrails:rails:3.0.1
Rubyonrails » Rails » Version: 3.0.10

cpe:2.3:a:rubyonrails:rails:3.0.10
Rubyonrails » Rails » Version: 3.0.11

cpe:2.3:a:rubyonrails:rails:3.0.11
Rubyonrails » Rails » Version: 3.0.12

cpe:2.3:a:rubyonrails:rails:3.0.12
Rubyonrails » Rails » Version: 3.0.13

cpe:2.3:a:rubyonrails:rails:3.0.13
Rubyonrails » Rails » Version: 3.0.14

cpe:2.3:a:rubyonrails:rails:3.0.14
Rubyonrails » Rails » Version: 3.0.16

cpe:2.3:a:rubyonrails:rails:3.0.16
Rubyonrails » Rails » Version: 3.0.17

cpe:2.3:a:rubyonrails:rails:3.0.17
Rubyonrails » Rails » Version: 3.0.18

cpe:2.3:a:rubyonrails:rails:3.0.18
Rubyonrails » Rails » Version: 3.0.19

cpe:2.3:a:rubyonrails:rails:3.0.19
Rubyonrails » Rails » Version: 3.0.2

cpe:2.3:a:rubyonrails:rails:3.0.2
Rubyonrails » Rails » Version: 3.0.20

cpe:2.3:a:rubyonrails:rails:3.0.20
Rubyonrails » Rails » Version: 3.0.3

cpe:2.3:a:rubyonrails:rails:3.0.3
Rubyonrails » Rails » Version: 3.0.4

cpe:2.3:a:rubyonrails:rails:3.0.4
Rubyonrails » Rails » Version: 3.0.5

cpe:2.3:a:rubyonrails:rails:3.0.5
Rubyonrails » Rails » Version: 3.0.6

cpe:2.3:a:rubyonrails:rails:3.0.6
Rubyonrails » Rails » Version: 3.0.7

cpe:2.3:a:rubyonrails:rails:3.0.7
Rubyonrails » Rails » Version: 3.0.8

cpe:2.3:a:rubyonrails:rails:3.0.8
Rubyonrails » Rails » Version: 3.0.9

cpe:2.3:a:rubyonrails:rails:3.0.9
Rubyonrails » Rails » Version: 3.1.0

cpe:2.3:a:rubyonrails:rails:3.1.0
Rubyonrails » Rails » Version: 3.1.1

cpe:2.3:a:rubyonrails:rails:3.1.1
Rubyonrails » Rails » Version: 3.1.10

cpe:2.3:a:rubyonrails:rails:3.1.10
Rubyonrails » Rails » Version: 3.1.2

cpe:2.3:a:rubyonrails:rails:3.1.2
Rubyonrails » Rails » Version: 3.1.3

cpe:2.3:a:rubyonrails:rails:3.1.3
Rubyonrails » Rails » Version: 3.1.4

cpe:2.3:a:rubyonrails:rails:3.1.4
Rubyonrails » Rails » Version: 3.1.5

cpe:2.3:a:rubyonrails:rails:3.1.5
Rubyonrails » Rails » Version: 3.1.6

cpe:2.3:a:rubyonrails:rails:3.1.6
Rubyonrails » Rails » Version: 3.1.7

cpe:2.3:a:rubyonrails:rails:3.1.7
Rubyonrails » Rails » Version: 3.1.8

cpe:2.3:a:rubyonrails:rails:3.1.8
Rubyonrails » Rails » Version: 3.1.9

cpe:2.3:a:rubyonrails:rails:3.1.9
Rubyonrails » Rails » Version: 3.2.0

cpe:2.3:a:rubyonrails:rails:3.2.0
Rubyonrails » Rails » Version: 3.2.1

cpe:2.3:a:rubyonrails:rails:3.2.1
Rubyonrails » Rails » Version: 3.2.10

cpe:2.3:a:rubyonrails:rails:3.2.10
Rubyonrails » Rails » Version: 3.2.11

cpe:2.3:a:rubyonrails:rails:3.2.11
Rubyonrails » Rails » Version: 3.2.12

cpe:2.3:a:rubyonrails:rails:3.2.12
Rubyonrails » Rails » Version: 3.2.2

cpe:2.3:a:rubyonrails:rails:3.2.2
Rubyonrails » Rails » Version: 3.2.3

cpe:2.3:a:rubyonrails:rails:3.2.3
Rubyonrails » Rails » Version: 3.2.4

cpe:2.3:a:rubyonrails:rails:3.2.4
Rubyonrails » Rails » Version: 3.2.5

cpe:2.3:a:rubyonrails:rails:3.2.5
Rubyonrails » Rails » Version: 3.2.6

cpe:2.3:a:rubyonrails:rails:3.2.6
Rubyonrails » Rails » Version: 3.2.7

cpe:2.3:a:rubyonrails:rails:3.2.7
Rubyonrails » Rails » Version: 3.2.8

cpe:2.3:a:rubyonrails:rails:3.2.8
Rubyonrails » Rails » Version: 3.2.9

cpe:2.3:a:rubyonrails:rails:3.2.9
Rubyonrails » Ruby On Rails » Version: 0.10.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.10.0
Rubyonrails » Ruby On Rails » Version: 0.10.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.10.1
Rubyonrails » Ruby On Rails » Version: 0.11.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.11.0
Rubyonrails » Ruby On Rails » Version: 0.11.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.11.1
Rubyonrails » Ruby On Rails » Version: 0.12.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.12.0
Rubyonrails » Ruby On Rails » Version: 0.12.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.12.1
Rubyonrails » Ruby On Rails » Version: 0.13.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.13.0
Rubyonrails » Ruby On Rails » Version: 0.13.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.13.1
Rubyonrails » Ruby On Rails » Version: 0.14.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.14.1
Rubyonrails » Ruby On Rails » Version: 0.14.2

cpe:2.3:a:rubyonrails:ruby_on_rails:0.14.2
Rubyonrails » Ruby On Rails » Version: 0.14.3

cpe:2.3:a:rubyonrails:ruby_on_rails:0.14.3
Rubyonrails » Ruby On Rails » Version: 0.14.4

cpe:2.3:a:rubyonrails:ruby_on_rails:0.14.4
Rubyonrails » Ruby On Rails » Version: 0.5.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.0
Rubyonrails » Ruby On Rails » Version: 0.5.5

cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.5
Rubyonrails » Ruby On Rails » Version: 0.5.6

cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.6
Rubyonrails » Ruby On Rails » Version: 0.5.7

cpe:2.3:a:rubyonrails:ruby_on_rails:0.5.7
Rubyonrails » Ruby On Rails » Version: 0.6.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.0
Rubyonrails » Ruby On Rails » Version: 0.6.5

cpe:2.3:a:rubyonrails:ruby_on_rails:0.6.5
Rubyonrails » Ruby On Rails » Version: 0.7.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.7.0
Rubyonrails » Ruby On Rails » Version: 0.8.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.0
Rubyonrails » Ruby On Rails » Version: 0.8.5

cpe:2.3:a:rubyonrails:ruby_on_rails:0.8.5
Rubyonrails » Ruby On Rails » Version: 0.9.0

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.0
Rubyonrails » Ruby On Rails » Version: 0.9.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.1
Rubyonrails » Ruby On Rails » Version: 0.9.2

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.2
Rubyonrails » Ruby On Rails » Version: 0.9.3

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.3
Rubyonrails » Ruby On Rails » Version: 0.9.4

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.4
Rubyonrails » Ruby On Rails » Version: 0.9.4.1

cpe:2.3:a:rubyonrails:ruby_on_rails:0.9.4.1
Rubyonrails » Ruby On Rails » Version: 1.0.0

cpe:2.3:a:rubyonrails:ruby_on_rails:1.0.0
Rubyonrails » Ruby On Rails » Version: 1.1.0

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.0
Rubyonrails » Ruby On Rails » Version: 1.1.1

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.1
Rubyonrails » Ruby On Rails » Version: 1.1.2

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.2
Rubyonrails » Ruby On Rails » Version: 1.1.3

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.3
Rubyonrails » Ruby On Rails » Version: 1.1.4

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.4
Rubyonrails » Ruby On Rails » Version: 1.1.5

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.5
Rubyonrails » Ruby On Rails » Version: 1.1.6

cpe:2.3:a:rubyonrails:ruby_on_rails:1.1.6
Rubyonrails » Ruby On Rails » Version: 1.2.0

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.0
Rubyonrails » Ruby On Rails » Version: 1.2.1

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.1
Rubyonrails » Ruby On Rails » Version: 1.2.2

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.2
Rubyonrails » Ruby On Rails » Version: 1.2.3

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.3
Rubyonrails » Ruby On Rails » Version: 1.2.4

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.4
Rubyonrails » Ruby On Rails » Version: 1.2.5

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.5
Rubyonrails » Ruby On Rails » Version: 1.2.6

cpe:2.3:a:rubyonrails:ruby_on_rails:1.2.6
Rubyonrails » Ruby On Rails » Version: 1.9.3

cpe:2.3:a:rubyonrails:ruby_on_rails:1.9.3
Rubyonrails » Ruby On Rails » Version: 1.9.5

cpe:2.3:a:rubyonrails:ruby_on_rails:1.9.5
Rubyonrails » Ruby On Rails » Version: 2.0.0

cpe:2.3:a:rubyonrails:ruby_on_rails:2.0.0
Rubyonrails » Ruby On Rails » Version: 2.0.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.0.1
Rubyonrails » Ruby On Rails » Version: 2.0.2

cpe:2.3:a:rubyonrails:ruby_on_rails:2.0.2
Rubyonrails » Ruby On Rails » Version: 2.0.4

cpe:2.3:a:rubyonrails:ruby_on_rails:2.0.4
Rubyonrails » Ruby On Rails » Version: 2.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.1
Rubyonrails » Ruby On Rails » Version: 2.1.0

cpe:2.3:a:rubyonrails:ruby_on_rails:2.1.0
Rubyonrails » Ruby On Rails » Version: 2.1.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.1.1
Rubyonrails » Ruby On Rails » Version: 2.1.2

cpe:2.3:a:rubyonrails:ruby_on_rails:2.1.2
Rubyonrails » Ruby On Rails » Version: 2.2.0

cpe:2.3:a:rubyonrails:ruby_on_rails:2.2.0
Rubyonrails » Ruby On Rails » Version: 2.2.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.2.1
Rubyonrails » Ruby On Rails » Version: 2.2.2

cpe:2.3:a:rubyonrails:ruby_on_rails:2.2.2
Rubyonrails » Ruby On Rails » Version: 2.3.0

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.0
Rubyonrails » Ruby On Rails » Version: 2.3.1

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.1
Rubyonrails » Ruby On Rails » Version: 2.3.10

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.10
Rubyonrails » Ruby On Rails » Version: 2.3.11

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.11
Rubyonrails » Ruby On Rails » Version: 2.3.12

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.12
Rubyonrails » Ruby On Rails » Version: 2.3.13

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.13
Rubyonrails » Ruby On Rails » Version: 2.3.14

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.14
Rubyonrails » Ruby On Rails » Version: 2.3.15

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.15
Rubyonrails » Ruby On Rails » Version: 2.3.16

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.16
Rubyonrails » Ruby On Rails » Version: 2.3.2

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.2
Rubyonrails » Ruby On Rails » Version: 2.3.3

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.3
Rubyonrails » Ruby On Rails » Version: 2.3.4

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.4
Rubyonrails » Ruby On Rails » Version: 2.3.9

cpe:2.3:a:rubyonrails:ruby_on_rails:2.3.9
Rubyonrails » Ruby On Rails » Version: 3.0.4

cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.4
Rubyonrails » Ruby On Rails » Version: 3.1.11

cpe:2.3:a:rubyonrails:ruby_on_rails:3.1.11
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1855

Products

Pricing

Contact Us