Oval Definition:	oval:com.ubuntu.trusty:def:20153226000
Revision Date: 2015-07-26 Version: 1 Title: CVE-2015-3226 on Ubuntu 14.04 LTS (trusty) - medium. Description: Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding. Family: unix Class: vulnerability Status: Reference(s): CVE-2015-3226 Platform(s): Ubuntu 14.04 LTS Product(s): Definition Synopsis Ubuntu 14.04 LTS (trusty) is installed. AND Package Information NOT While related to the CVE in some way, the 'rails' package in trusty is not affected (note: 'contains no code'). OR NOT While related to the CVE in some way, the 'rails-4.0' package in trusty is not affected. OR NOT While related to the CVE in some way, the 'ruby-actionpack-3.2' package in trusty is not affected (note: 'code not present'). OR NOT While related to the CVE in some way, the 'ruby-activerecord-3.2' package in trusty is not affected (note: 'code not present'). OR The 'ruby-activesupport-3.2' package in trusty is affected and needs fixing. OR NOT While related to the CVE in some way, the 'ruby-rails-3.2' package in trusty is not affected (note: 'code not present').
BACK