CVE-2010-1330

Published: Nov 23, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.

Affected (35)

Products: Jruby: Jruby

Jruby

1 product

Jruby

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Jruby Jruby	Up to 1.4.0
Jruby Jruby	Version 0.9.0
Jruby Jruby	Version 0.9.1
Jruby Jruby	Version 0.9.2
Jruby Jruby	Version 0.9.8
Jruby Jruby	Version 0.9.9
Jruby Jruby	Version 1.0.0
Jruby Jruby	Version 1.0.0 rc1
Jruby Jruby	Version 1.0.0 rc2
Jruby Jruby	Version 1.0.0 rc3
Jruby Jruby	Version 1.0.1
Jruby Jruby	Version 1.0.2
Jruby Jruby	Version 1.0.3
Jruby Jruby	Version 1.1.1
Jruby Jruby	Version 1.1.2
Jruby Jruby	Version 1.1.3
Jruby Jruby	Version 1.1.4
Jruby Jruby	Version 1.1.5
Jruby Jruby	Version 1.1.6
Jruby Jruby	Version 1.1.6 rc1
Jruby Jruby	Version 1.1
Jruby Jruby	Version 1.1 beta1
Jruby Jruby	Version 1.1 rc1
Jruby Jruby	Version 1.1 rc2
Jruby Jruby	Version 1.1 rc3
Jruby Jruby	Version 1.2.0
Jruby Jruby	Version 1.2.0 rc1
Jruby Jruby	Version 1.2.0 rc2
Jruby Jruby	Version 1.3.0
Jruby Jruby	Version 1.3.0 rc1
Jruby Jruby	Version 1.3.0 rc2
Jruby Jruby	Version 1.3.1
Jruby Jruby	Version 1.4.0 rc1
Jruby Jruby	Version 1.4.0 rc2
Jruby Jruby	Version 1.4.0 rc3