CVE-2013-0256
Fixed in a distro release EPSS 3%
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.
Products: ruby-lang rdoc, ruby-lang ruby, canonical ubuntu_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | rdoc | 3.12.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | ruby1.9.1 | 1.9.2.0-2+deb6u4 |
| Red Hat openshift 1 | ruby193-ruby | 0:1.9.3.327-28.el6 |
| Red Hat openshift 1 | ruby193-ruby-debuginfo | 0:1.9.3.327-28.el6 |
| Red Hat openshift 1 | ruby193-ruby-devel | 0:1.9.3.327-28.el6 |
| Red Hat openshift 1 | ruby193-ruby-doc | 0:1.9.3.327-28.el6 |
| Red Hat openshift 1 | ruby193-ruby-irb | 0:1.9.3.327-28.el6 |
| Red Hat openshift 1 | ruby193-ruby-libs | 0:1.9.3.327-28.el6 |
| Red Hat openshift 1 | ruby193-ruby-tcltk | 0:1.9.3.327-28.el6 |
| Red Hat openshift 1 | ruby193-rubygem-activesupport | 1:3.2.8-4.el6 |
| Red Hat openshift 1 | ruby193-rubygem-bcrypt-ruby | 0:3.0.1-7.el6 |
| Red Hat openshift 1 | ruby193-rubygem-bcrypt-ruby-debuginfo | 0:3.0.1-7.el6 |
| Red Hat openshift 1 | ruby193-rubygem-bigdecimal | 0:1.1.0-28.el6 |
| Red Hat openshift 1 | ruby193-rubygem-bson | 0:1.5.2-6.el6op |
| Red Hat openshift 1 | ruby193-rubygem-chunky_png | 0:1.2.6-3.el6op |
| Red Hat openshift 1 | ruby193-rubygem-ci_reporter | 0:1.7.2-4.el6op |
| Red Hat openshift 1 | ruby193-rubygem-compass | 0:0.12.2-4.el6op |
| Red Hat openshift 1 | ruby193-rubygem-fastthread | 0:1.0.7-7.el6op |
| Red Hat openshift 1 | ruby193-rubygem-fastthread-debuginfo | 0:1.0.7-7.el6op |
| Red Hat openshift 1 | ruby193-rubygem-haml | 0:3.1.7-3.el6op |
| Red Hat openshift 1 | ruby193-rubygem-http_connection | 0:1.4.1-7.el6 |
| Red Hat openshift 1 | ruby193-rubygem-io-console | 0:0.3-28.el6 |
| Red Hat openshift 1 | ruby193-rubygem-json | 0:1.5.4-28.el6 |
| Red Hat openshift 1 | ruby193-rubygem-minitest | 0:2.5.1-28.el6 |
| Red Hat openshift 1 | ruby193-rubygem-rack | 1:1.4.1-5.el6 |
| Red Hat openshift 1 | ruby193-rubygem-rack-test | 0:0.6.1-3.el6 |
| Red Hat openshift 1 | ruby193-rubygem-rake | 0:0.9.2.2-28.el6 |
| Red Hat openshift 1 | ruby193-rubygem-rdoc | 0:3.9.4-28.el6 |
| Red Hat openshift 1 | ruby193-rubygem-rspec | 0:2.11.0-2.el6 |
| Red Hat openshift 1 | ruby193-rubygem-treetop | 0:1.4.10-6.el6 |
| Red Hat openshift 1 | ruby193-rubygem-xml-simple | 0:1.0.12-10.el6op |
| Red Hat openshift 1 | ruby193-rubygems | 0:1.8.23-28.el6 |
| Red Hat openshift 1 | ruby193-rubygems-devel | 0:1.8.23-28.el6 |
| Red Hat openshift 1 | rubygem-json | 0:1.7.3-2.el6op |
| Red Hat openshift 1 | rubygem-json-debuginfo | 0:1.7.3-2.el6op |
| Red Hat openshift 1 | rubygem-json-doc | 0:1.7.3-2.el6op |
| Red Hat openshift 1 | rubygem-rdoc | 0:3.8-9.el6op |
| Red Hat openshift 1 | rubygem-rdoc-doc | 0:3.8-9.el6op |