CVE-2016-6316

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-6316
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6316.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-6316
Aliases
Related
Published
2016-09-07T19:28:10Z
Modified
2024-11-11T06:53:19.381245Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers.

References

Affected packages

Debian:11 / rails

Package

Name
rails
Purl
pkg:deb/debian/rails?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:4.2.7.1-1

Ecosystem specific 

{
    "urgency": "low"
}

Debian:12 / rails

Package

Name
rails
Purl
pkg:deb/debian/rails?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:4.2.7.1-1

Ecosystem specific 

{
    "urgency": "low"
}

Debian:13 / rails

Package

Name
rails
Purl
pkg:deb/debian/rails?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:4.2.7.1-1

Ecosystem specific 

{
    "urgency": "low"
}

Git / github.com/rails/rails

Affected ranges

Type
GIT
Repo
https://github.com/rails/rails
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
01b470f526922ad3fc5562a237d11d45347befa9
Last affected
0690f6f3a47b8fddf60ac57da006f0b8bfa22e32
Last affected
0aca27d407a339683665dcbb2199a1337972bb5e
Last affected
0e6b118313b5603482df071e30434ddab758f8a1
Last affected
1081ea66a3d864f310a1a55f22229af4e10436a7
Last affected
15ac2f0b6b2702f180707f480eb966a4e3b96e25
Last affected
15e2b5887f2185e01b8d92646a7f441b8c1c549e
Last affected
186e3c71f95316b94e728eb62b519d074d27cea3
Last affected
1aabea698b4518f37263af15818a2c9fc7565521
Last affected
1f6113c6a9f1f2f8e362b0e7702afac5d8cf98db
Last affected
24027162dbe226acfbf3a91872237a9557764d72
Last affected
254e8e2c97b5df1dafd54cf8f305f7bad05f4a63
Last affected
276b72c60342eb716e7457b447bce1e352780e92
Last affected
2abe4b032d080f7177c6f2e34c9124c468e8a293
Last affected
2c3260147f90e35a6a5e3ce1b520b4de701e701e
Last affected
2efddadd6cba4e2129acedf1d402d11abcc03996
Last affected
31e922996b97b7c223ebc1e26d1a1a2764bb0a62
Last affected
375d9a0a7fb329b0fbbd75a13e93e53a00520587
Last affected
38bf9cf36864b5656816b1aadf324624dbcb60b9
Last affected
38df020c95beca7e12f0188cb7e18f3c37789e20
Last affected
45d6cd94b3ef2ec77166def41f29188445b35608
Last affected
4e168015cef61207981d2427d4dbb6cf15f71182
Last affected
505e84599aff6abf719484636b0515e1ce2e2220
Last affected
5505c1d700f17e2009e1189a7aa6dafafe7062a4
Last affected
5d101c33fa19deca00e251152d25090cc152998f
Last affected
63dce16202fb7e1517e109266c74db95f95b4cb1
Last affected
64146cf7babe35fd962576b699fa0deb4cfe0d70
Last affected
67b8fbca921ba7e3e1fc02fe30a20963a67017e5
Last affected
6ac6daa43e1c5b7388f8fd69f8117eb7668887c7
Last affected
6fe2572af11dc42f33d4f0e33a22391a85f2a1d2
Last affected
73521d586981279a99d3ba038d62e2414125df7a
Last affected
7847a19f476fb9bee287681586d872ea43785e53
Last affected
7b8e4f82717fcb944eb7e712050b223bd47b544e
Last affected
7c4bfe1c954ef90acf4f790e46fcbbd07d85af3e
Last affected
7f2327f65b4117384bec3547ccd5a99028df57e0
Last affected
8381d398cedf3e95fb073b8110d80f636cff449c
Last affected
97ad61e9583e2bf5c57d6f75008cadc80ba9b910
Last affected
9891ca89c69732a21743f0349f2995956a7802e7
Last affected
98d06c6bd4eefeeb342d05116fccefa11875cb9b
Last affected
9bb76261d39b59e7e229c80d052ca91a65ff17be
Last affected
a0e0b67b5afbb02d9ea9e48d71ae80b3efb8c0ac
Last affected
aa18c0cac01f63fa20095581118548c68b17a3f3
Last affected
b32babc4b0ff8f830933f25375ce9dbfbb356601
Last affected
b33cf74a4917c6ac5229ba8d6296d33d0b3437bd
Last affected
b341e45d8e75d49a9f599881eea952c2a41af032
Last affected
b57fa0bf690b299ba4d8a0051bf06b9cecd3975a
Last affected
b792566f3ebdd0c7dc688db7a4076d1c2c74f69f
Last affected
ba708126d85a020f8984db1a12261bcdba47d70f
Last affected
bac6ba99b11515374d3251ee4a1d1f3a0002713c
Last affected
bb382b7aee116446518ca4ed1c6472d6b58f42b5
Last affected
cca85ba699242c3266c5132dd601fdd8c5c5bb16
Last affected
cdb307294a43eec489f0ea6ffdc6f0a07b16ff5c
Last affected
d1b9cf2d48b4e58da2da563107dd2783e326e287
Last affected
d314a48a40271552837fb795d9cde2fb516d2f78
Last affected
dac822ef58ae05f0e805222fa8744116080165ac
Last affected
dfa7a76de8c1f7af0ef28119f9ac3072057c665e
Last affected
e9474c89d9583d50be485bef8fabb31a75b242bb
Last affected
ecc6bb597fba7512e4eb34566fb2e8eaae9e39b8
Last affected
f17b04a23e7c597876cb2320ef9d525537e0b0a8
Last affected
f1ccb2e6ecb5486179ee6b20438d562ac45de4f4
Last affected
f1e977cd14b13e316ad8195f49d41608a54891c6
Last affected
f36dcaf488b4357a52f43e3912628428956d351f
Last affected
febd65223e2b3a40755d23a734f6a77e04b97c88

Affected versions

v0.*

v0.10.0
v0.10.1
v0.11.0
v0.11.1
v0.12.0
v0.13.0
v0.13.1
v0.14.1
v0.14.3
v0.9.1
v0.9.2
v0.9.3
v0.9.4
v0.9.4.1
v0.9.5

v1.*

v1.1.0
v1.1.0_RC1
v1.1.1

v2.*

v2.0.0
v2.0.0_PR
v2.0.0_RC1
v2.0.0_RC2
v2.0.1
v2.1.0
v2.1.0_RC1
v2.2.0
v2.2.1
v2.3.0
v2.3.1
v2.3.2
v2.3.2.1

v3.*

v3.0.0
v3.0.0.beta.2
v3.0.0.beta.3
v3.0.0.beta1
v3.0.0.beta2
v3.0.0.beta3
v3.0.0.beta4
v3.0.0_RC
v3.0.0_RC2
v3.0.2
v3.0.3
v3.1.0
v3.1.0.beta1
v3.1.0.rc1
v3.1.0.rc3
v3.1.0.rc4
v3.1.0.rc5
v3.1.0.rc6
v3.1.0.rc7
v3.1.0.rc8
v3.1.1
v3.1.1.rc1
v3.1.1.rc2
v3.1.1.rc3
v3.1.2
v3.1.2.rc1
v3.1.2.rc2
v3.2.0
v3.2.0.rc1
v3.2.0.rc2
v3.2.1
v3.2.2
v3.2.2.rc1

v4.*

v4.0.0.beta1
v4.0.0.rc1
v4.0.1
v4.0.1.rc1
v4.0.1.rc2
v4.0.1.rc3
v4.0.1.rc4
v4.0.2
v4.0.3
v4.0.4
v4.0.4.rc1
v4.0.5
v4.1.0
v4.1.0.beta1
v4.1.0.beta2
v4.1.0.rc1
v4.1.0.rc2
v4.1.1
v4.1.2
v4.1.2.rc1
v4.1.2.rc2
v4.1.2.rc3
v4.2.0
v4.2.0.beta1
v4.2.0.beta4
v4.2.0.rc1
v4.2.0.rc2
v4.2.0.rc3
v4.2.1
v4.2.1.rc1
v4.2.1.rc2
v4.2.1.rc3
v4.2.1.rc4
v4.2.2

v5.*

v5.0.0
v5.0.0.beta1
v5.0.0.beta1.1
v5.0.0.beta2
v5.0.0.beta3
v5.0.0.beta4
v5.0.0.rc1
v5.0.0.rc2