Oval Definition:	oval:com.ubuntu.precise:def:20153226000
Revision Date: 2015-07-26 Version: 1 Title: CVE-2015-3226 on Ubuntu 12.04 LTS (precise) - medium. Description: Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding. Family: unix Class: vulnerability Status: Reference(s): CVE-2015-3226 Platform(s): Ubuntu 12.04 LTS Product(s): Definition Synopsis Ubuntu 12.04 LTS (precise) is installed. AND Package Information NOT While related to the CVE in some way, the 'rails' package in precise is not affected (note: 'contains no code'). OR The vulnerability of the 'ruby-actionpack-2.3' package in precise is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-activerecord-2.3' package in precise is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-activesupport-2.3' package in precise is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'ruby-rails-2.3' package in precise is not known (status: 'needs-triage'). It is pending evaluation.
BACK