Cross-site scripting (XSS) vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| joshua_peek | rack-ssl | * |
| joshua_peek | rack-ssl | 1.3.1 |
| joshua_peek | rack-ssl | 1.3.3 |
| joshua_peek | rack-ssl | 1.2.0 |
| joshua_peek | rack-ssl | 1.3.0 |
| joshua_peek | rack-ssl | 1.1.0 |
| joshua_peek | rack-ssl | 1.0.0 |
| joshua_peek | rack-ssl | 1.3.2 |