Contents

---
gem: will_paginate
osvdb: 101138
cve: 2013-6459
url: https://nvd.nist.gov/vuln/detail/CVE-2013-6459
title: will_paginate Gem for Ruby Generated Pagination Link Unspecified XSS
date: 2013-09-19
description: will_paginate Gem for Ruby contains a flaw that allows a cross-site scripting (XSS) attack.
  This flaw exists because the application does not validate certain unspecified input related to
  generated pagination links before returning it to the user. This may allow an attacker to create
  a specially crafted request that would execute arbitrary script code in a users browser within the
  trust relationship between their browser and the server.
cvss_v2: 4.3
patched_versions:
  - ">= 3.0.5"

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/will_paginate/CVE-2013-6459.yml