Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-khjc-pfnn-rudu
Vulnerability ID VCID-khjc-pfnn-rudu
Aliases CVE-2012-6684
GHSA-r23g-3qw4-gfh2
OSV-115941
Summary security update
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00296 https://api.first.org/data/v1/epss?cve=CVE-2012-6684
epss 0.00296 https://api.first.org/data/v1/epss?cve=CVE-2012-6684
epss 0.00296 https://api.first.org/data/v1/epss?cve=CVE-2012-6684
epss 0.00296 https://api.first.org/data/v1/epss?cve=CVE-2012-6684
generic_textual MODERATE https://co3k.org/blog/redcloth-unfixed-xss-en
generic_textual MODERATE http://seclists.org/fulldisclosure/2014/Dec/50
generic_textual MODERATE https://gist.github.com/co3k/75b3cb416c342aa1414c
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-r23g-3qw4-gfh2
generic_textual MODERATE https://github.com/rubysec/ruby-advisory-db/blob/master/gems/RedCloth/CVE-2012-6684.yml
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2012-6684
generic_textual MODERATE https://web.archive.org/web/20150128115714/http://jgarber.lighthouseapp.com/projects/13054-redcloth/tickets/243-xss
generic_textual MODERATE http://www.debian.org/security/2015/dsa-3168
Reference id Reference type URL
http://co3k.org/blog/redcloth-unfixed-xss-en
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6684.json
https://api.first.org/data/v1/epss?cve=CVE-2012-6684
https://bugs.debian.org/774748
https://co3k.org/blog/redcloth-unfixed-xss-en
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6684
http://seclists.org/fulldisclosure/2014/Dec/50
https://gist.github.com/co3k/75b3cb416c342aa1414c
https://github.com/jgarber/redcloth/commit/2f6dab4d6aea5cee778d2f37a135637fe3f1573c
https://web.archive.org/web/20150128115714/http://jgarber.lighthouseapp.com/projects/13054-redcloth/tickets/243-xss
http://www.debian.org/security/2015/dsa-3168
1179870 https://bugzilla.redhat.com/show_bug.cgi?id=1179870
774748 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774748
CVE-2012-6684 https://nvd.nist.gov/vuln/detail/CVE-2012-6684
CVE-2012-6684.YML https://github.com/rubysec/ruby-advisory-db/blob/master/gems/RedCloth/CVE-2012-6684.yml
GHSA-r23g-3qw4-gfh2 https://github.com/advisories/GHSA-r23g-3qw4-gfh2
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.53335
EPSS Score 0.00296
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:04:04.662440+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.6.0