Search for packages
| purl | pkg:deb/debian/rails@2.3.11-0.1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-49pq-vg95-jkh2 | Cross-Site Request Forgery (CSRF) Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2) API requests that leverage "combinations of browser plugins and HTTP redirects," a related issue to CVE-2011-0696. |
CVE-2011-0447
GHSA-24fg-p96v-hxh8 |
| VCID-cnqr-6e98-5kgk | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email value. |
CVE-2011-0446
GHSA-75w6-p6mg-vh8j |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T08:50:06.940406+00:00 | Debian Importer | Fixing | VCID-cnqr-6e98-5kgk | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T08:44:03.155680+00:00 | Debian Importer | Fixing | VCID-49pq-vg95-jkh2 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-11T17:56:09.493736+00:00 | Debian Importer | Fixing | VCID-cnqr-6e98-5kgk | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T17:52:05.141310+00:00 | Debian Importer | Fixing | VCID-49pq-vg95-jkh2 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:51:44.433217+00:00 | Debian Importer | Fixing | VCID-49pq-vg95-jkh2 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:51:44.376701+00:00 | Debian Importer | Fixing | VCID-cnqr-6e98-5kgk | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |