CVE-2016-6316

Published: Sep 7, 2016Modified: May 6, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers.

Affected (222)

Products: Rubyonrails: Rails, Ruby On Rails · Debian: Debian Linux

2 products

1 product

Configuration A

221 vulnerable

Vulnerable Software	Affected Versions
Rubyonrails Rails	Version 3.0.0
Rubyonrails Rails	Version 3.0.0 beta2
Rubyonrails Rails	Version 3.0.0 beta3
Rubyonrails Rails	Version 3.0.0 beta4
Rubyonrails Rails	Version 3.0.0 beta
Rubyonrails Rails	Version 3.0.0 rc2
Rubyonrails Rails	Version 3.0.0 rc
Rubyonrails Rails	Version 3.0.10
Rubyonrails Rails	Version 3.0.10 rc1
Rubyonrails Rails	Version 3.0.11
Rubyonrails Rails	Version 3.0.12
Rubyonrails Rails	Version 3.0.12 rc1
Rubyonrails Rails	Version 3.0.13
Rubyonrails Rails	Version 3.0.13 rc1
Rubyonrails Rails	Version 3.0.14
Rubyonrails Rails	Version 3.0.16
Rubyonrails Rails	Version 3.0.17
Rubyonrails Rails	Version 3.0.18
Rubyonrails Rails	Version 3.0.19
Rubyonrails Rails	Version 3.0.1
Rubyonrails Rails	Version 3.0.20
Rubyonrails Rails	Version 3.0.2
Rubyonrails Rails	Version 3.0.3
Rubyonrails Rails	Version 3.0.4 rc1
Rubyonrails Rails	Version 3.0.5
Rubyonrails Rails	Version 3.0.5 rc1
Rubyonrails Rails	Version 3.0.6
Rubyonrails Rails	Version 3.0.6 rc1
Rubyonrails Rails	Version 3.0.6 rc2
Rubyonrails Rails	Version 3.0.7
Rubyonrails Rails	Version 3.0.7 rc1
Rubyonrails Rails	Version 3.0.7 rc2
Rubyonrails Rails	Version 3.0.8
Rubyonrails Rails	Version 3.0.8 rc1
Rubyonrails Rails	Version 3.0.8 rc2
Rubyonrails Rails	Version 3.0.8 rc3
Rubyonrails Rails	Version 3.0.8 rc4
Rubyonrails Rails	Version 3.0.9
Rubyonrails Rails	Version 3.0.9 rc1
Rubyonrails Rails	Version 3.0.9 rc2
Rubyonrails Rails	Version 3.0.9 rc3
Rubyonrails Rails	Version 3.0.9 rc4
Rubyonrails Rails	Version 3.0.9 rc5
Rubyonrails Rails	Version 3.1.0
Rubyonrails Rails	Version 3.1.0 beta1
Rubyonrails Rails	Version 3.1.0 rc1
Rubyonrails Rails	Version 3.1.0 rc2
Rubyonrails Rails	Version 3.1.0 rc3
Rubyonrails Rails	Version 3.1.0 rc4
Rubyonrails Rails	Version 3.1.0 rc5
Rubyonrails Rails	Version 3.1.0 rc6
Rubyonrails Rails	Version 3.1.0 rc7
Rubyonrails Rails	Version 3.1.0 rc8
Rubyonrails Rails	Version 3.1.10
Rubyonrails Rails	Version 3.1.12
Rubyonrails Rails	Version 3.1.1
Rubyonrails Rails	Version 3.1.1 rc1
Rubyonrails Rails	Version 3.1.1 rc2
Rubyonrails Rails	Version 3.1.1 rc3
Rubyonrails Rails	Version 3.1.2
Rubyonrails Rails	Version 3.1.2 rc1
Rubyonrails Rails	Version 3.1.2 rc2
Rubyonrails Rails	Version 3.1.3
Rubyonrails Rails	Version 3.1.4
Rubyonrails Rails	Version 3.1.4 rc1
Rubyonrails Rails	Version 3.1.5
Rubyonrails Rails	Version 3.1.5 rc1
Rubyonrails Rails	Version 3.1.6
Rubyonrails Rails	Version 3.1.7
Rubyonrails Rails	Version 3.1.8
Rubyonrails Rails	Version 3.1.9
Rubyonrails Rails	Version 3.2.0
Rubyonrails Rails	Version 3.2.0 rc1
Rubyonrails Rails	Version 3.2.0 rc2
Rubyonrails Rails	Version 3.2.10
Rubyonrails Rails	Version 3.2.11
Rubyonrails Rails	Version 3.2.12
Rubyonrails Rails	Version 3.2.13
Rubyonrails Rails	Version 3.2.13 rc1
Rubyonrails Rails	Version 3.2.13 rc2
Rubyonrails Rails	Version 3.2.15
Rubyonrails Rails	Version 3.2.15 rc3
Rubyonrails Rails	Version 3.2.16
Rubyonrails Rails	Version 3.2.17
Rubyonrails Rails	Version 3.2.18
Rubyonrails Rails	Version 3.2.1
Rubyonrails Rails	Version 3.2.21
Rubyonrails Rails	Version 3.2.22.2
Rubyonrails Rails	Version 3.2.2
Rubyonrails Rails	Version 3.2.2 rc1
Rubyonrails Rails	Version 3.2.3
Rubyonrails Rails	Version 3.2.3 rc1
Rubyonrails Rails	Version 3.2.3 rc2
Rubyonrails Rails	Version 3.2.4
Rubyonrails Rails	Version 3.2.4 rc1
Rubyonrails Rails	Version 3.2.5
Rubyonrails Rails	Version 3.2.6
Rubyonrails Rails	Version 3.2.7
Rubyonrails Rails	Version 3.2.7 rc1
Rubyonrails Rails	Version 3.2.8
Rubyonrails Rails	Version 3.2.8 rc1
Rubyonrails Rails	Version 3.2.8 rc2
Rubyonrails Rails	Version 3.2.9
Rubyonrails Rails	Version 3.2.9 rc1
Rubyonrails Rails	Version 3.2.9 rc2
Rubyonrails Rails	Version 3.2.9 rc3
Rubyonrails Rails	Version 4.0.0
Rubyonrails Rails	Version 4.0.0 beta
Rubyonrails Rails	Version 4.0.0 rc1
Rubyonrails Rails	Version 4.0.0 rc2
Rubyonrails Rails	Version 4.0.10
Rubyonrails Rails	Version 4.0.10 rc1
Rubyonrails Rails	Version 4.0.1
Rubyonrails Rails	Version 4.0.1 rc1
Rubyonrails Rails	Version 4.0.1 rc2
Rubyonrails Rails	Version 4.0.1 rc3
Rubyonrails Rails	Version 4.0.1 rc4
Rubyonrails Rails	Version 4.0.2
Rubyonrails Rails	Version 4.0.3
Rubyonrails Rails	Version 4.0.4
Rubyonrails Rails	Version 4.0.4 rc1
Rubyonrails Rails	Version 4.0.5
Rubyonrails Rails	Version 4.0.6
Rubyonrails Rails	Version 4.0.6 rc1
Rubyonrails Rails	Version 4.0.6 rc2
Rubyonrails Rails	Version 4.0.6 rc3
Rubyonrails Rails	Version 4.0.7
Rubyonrails Rails	Version 4.0.8
Rubyonrails Rails	Version 4.0.9
Rubyonrails Rails	Version 4.1.0
Rubyonrails Rails	Version 4.1.0 beta1
Rubyonrails Rails	Version 4.1.0 beta2
Rubyonrails Rails	Version 4.1.0 rc1
Rubyonrails Rails	Version 4.1.0 rc2
Rubyonrails Rails	Version 4.1.10
Rubyonrails Rails	Version 4.1.10 rc1
Rubyonrails Rails	Version 4.1.10 rc2
Rubyonrails Rails	Version 4.1.10 rc3
Rubyonrails Rails	Version 4.1.10 rc4
Rubyonrails Rails	Version 4.1.12
Rubyonrails Rails	Version 4.1.12 rc1
Rubyonrails Rails	Version 4.1.13
Rubyonrails Rails	Version 4.1.13 rc1
Rubyonrails Rails	Version 4.1.14.2
Rubyonrails Rails	Version 4.1.14
Rubyonrails Rails	Version 4.1.14 rc1
Rubyonrails Rails	Version 4.1.14 rc2
Rubyonrails Rails	Version 4.1.15
Rubyonrails Rails	Version 4.1.15 rc1
Rubyonrails Rails	Version 4.1.16
Rubyonrails Rails	Version 4.1.16 rc1
Rubyonrails Rails	Version 4.1.1
Rubyonrails Rails	Version 4.1.2
Rubyonrails Rails	Version 4.1.2 rc1
Rubyonrails Rails	Version 4.1.2 rc2
Rubyonrails Rails	Version 4.1.2 rc3
Rubyonrails Rails	Version 4.1.3
Rubyonrails Rails	Version 4.1.4
Rubyonrails Rails	Version 4.1.5
Rubyonrails Rails	Version 4.1.6
Rubyonrails Rails	Version 4.1.6 rc1
Rubyonrails Rails	Version 4.1.6 rc2
Rubyonrails Rails	Version 4.1.7.1
Rubyonrails Rails	Version 4.1.7
Rubyonrails Rails	Version 4.1.8
Rubyonrails Rails	Version 4.1.9
Rubyonrails Rails	Version 4.1.9 rc1
Rubyonrails Rails	Version 4.2.0
Rubyonrails Rails	Version 4.2.0 beta1
Rubyonrails Rails	Version 4.2.0 beta2
Rubyonrails Rails	Version 4.2.0 beta3
Rubyonrails Rails	Version 4.2.0 beta4
Rubyonrails Rails	Version 4.2.0 rc1
Rubyonrails Rails	Version 4.2.0 rc2
Rubyonrails Rails	Version 4.2.0 rc3
Rubyonrails Rails	Version 4.2.1
Rubyonrails Rails	Version 4.2.1 rc1
Rubyonrails Rails	Version 4.2.1 rc2
Rubyonrails Rails	Version 4.2.1 rc3
Rubyonrails Rails	Version 4.2.1 rc4
Rubyonrails Rails	Version 4.2.2
Rubyonrails Rails	Version 4.2.3
Rubyonrails Rails	Version 4.2.3 rc1
Rubyonrails Rails	Version 4.2.4
Rubyonrails Rails	Version 4.2.4 rc1
Rubyonrails Rails	Version 4.2.5.1
Rubyonrails Rails	Version 4.2.5.2
Rubyonrails Rails	Version 4.2.5
Rubyonrails Rails	Version 4.2.5 rc1
Rubyonrails Rails	Version 4.2.5 rc2
Rubyonrails Rails	Version 4.2.6
Rubyonrails Rails	Version 4.2.6 rc1
Rubyonrails Rails	Version 4.2.7
Rubyonrails Rails	Version 4.2.7 rc1
Rubyonrails Rails	Version 5.0.0 beta1.1
Rubyonrails Rails	Version 5.0.0 beta1
Rubyonrails Rails	Version 5.0.0 beta2
Rubyonrails Rails	Version 5.0.0 beta3
Rubyonrails Rails	Version 5.0.0 beta4
Rubyonrails Rails	Version 5.0.0 rc1
Rubyonrails Rails	Version 5.0.0 rc2
Rubyonrails Ruby On Rails	Version 3.0.4
Rubyonrails Ruby On Rails	Version 3.2.14
Rubyonrails Ruby On Rails	Version 3.2.14 rc1
Rubyonrails Ruby On Rails	Version 3.2.14 rc2
Rubyonrails Ruby On Rails	Version 3.2.15 rc1
Rubyonrails Ruby On Rails	Version 3.2.15 rc2
Rubyonrails Ruby On Rails	Version 3.2.19
Rubyonrails Ruby On Rails	Version 3.2.20
Rubyonrails Ruby On Rails	Version 3.2.22.1
Rubyonrails Ruby On Rails	Version 3.2.22
Rubyonrails Ruby On Rails	Version 4.0.10 rc2
Rubyonrails Ruby On Rails	Version 4.0.11.1
Rubyonrails Ruby On Rails	Version 4.0.11
Rubyonrails Ruby On Rails	Version 4.0.12
Rubyonrails Ruby On Rails	Version 4.0.13
Rubyonrails Ruby On Rails	Version 4.0.13 rc1
Rubyonrails Ruby On Rails	Version 4.1.11
Rubyonrails Ruby On Rails	Version 4.1.14.1
Rubyonrails Ruby On Rails	Version 5.0.0
Rubyonrails Ruby On Rails	Version 5.0.0 racecar1