Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Ruby | — | Apply OS X security update 2010-004Upgrade macOS to the latest version | Dec 16, 2011 | Jun 17, 2010 |
| Centos_linux | — | Upgrade ruby-rdocUpgrade ruby-docsUpgrade ruby-irbUpgrade ruby-riUpgrade ruby-tcltkUpgrade ruby-modeUpgrade ruby-libsUpgrade irbUpgrade rubyUpgrade ruby-devel | Dec 1, 2016 | Jun 17, 2010 |
| Freebsd | — | Upgrade rubyUpgrade ruby+onigurumaUpgrade ruby+pthreads+onigurumaUpgrade ruby+pthreads | Dec 10, 2025 | Aug 17, 2010 |
| Oracle_linux | — | Upgrade ruby-rdocUpgrade ruby-tcltkUpgrade ruby-libsUpgrade ruby-docsUpgrade rubyUpgrade ruby-develUpgrade ruby-riUpgrade ruby-modeUpgrade ruby-irb | Oct 16, 2024 | Jun 17, 2010 |
| Suse | — | Upgrade ruby-test-suiteUpgrade ruby-doc-htmlUpgrade rubyUpgrade ruby-tkUpgrade ruby-doc-riUpgrade ruby-examplesUpgrade ruby-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade ruby1.8Upgrade libruby1.8 | Nov 8, 2024 | Jun 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub