What is GHSA-8r6h-7x9g-xmw9?

GHSA-8r6h-7x9g-xmw9 is a security advisory published by GitHub Security Advisories with Medium severity. will_paginate Cross-site Scripting vulnerability

Which CVE IDs does GHSA-8r6h-7x9g-xmw9 cover?

GHSA-8r6h-7x9g-xmw9 covers the following CVE IDs: CVE-2013-6459. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-8r6h-7x9g-xmw9?

GHSA-8r6h-7x9g-xmw9 affects 1 product, including: rubygems/will_paginate:\u003c 3.0.5.

GHSA-8r6h-7x9g-xmw9Medium

will_paginate Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

October 24, 2017

Last Modified

November 10, 2023

🔗 CVE IDs covered (1)

CVE-2013-6459 →

📋 Description

Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.

🎯 Affected products1

rubygems/will_paginate:< 3.0.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2013-6459
https://access.redhat.com/errata/RHSA-2018:0336
https://github.com/mislav/will_paginate/releases/tag/v3.0.5
https://web.archive.org/web/20150709163604/http://www.securityfocus.com/bid/64509
https://github.com/advisories/GHSA-8r6h-7x9g-xmw9