RDoc contains XSS vulnerability (GHSA-v2r9-c84j-v7xm)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-0256
Severity: MODERATE · CWE: CWE-79

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Affected packages:
package: ecosystem: RubyGems
name: rdoc
ranges: type: ECOSYSTEM
events: introduced: 2.3.0
fixed: 3.12.1