Contents

---
gem: actionpack
framework: rails
cve: 2013-1855
osvdb: 91452
url: http://www.osvdb.org/show/osvdb/91452
title: XSS vulnerability in sanitize_css in Action Pack
date: 2013-03-19

description: |
  There is an XSS vulnerability in the `sanitize_css` method in Action
  Pack. Carefully crafted text can bypass the sanitization provided in
  the `sanitize_css` method in Action Pack

cvss_v2: 4.3

patched_versions:
  - ~> 2.3.18
  - ~> 3.1.12
  - ">= 3.2.13"

Version data entries

5 entries across 5 versions & 2 rubygems

Version	Path
bundler-budit-0.6.2	data/ruby-advisory-db/gems/actionpack/OSVDB-91452.yml
bundler-budit-0.6.1	data/ruby-advisory-db/gems/actionpack/OSVDB-91452.yml
bundler-audit-0.6.1	data/ruby-advisory-db/gems/actionpack/OSVDB-91452.yml
bundler-audit-0.6.0	data/ruby-advisory-db/gems/actionpack/OSVDB-91452.yml
bundler-audit-0.5.0	data/ruby-advisory-db/gems/actionpack/OSVDB-91452.yml