RedCloth Cross-site Scripting vulnerability (GHSA-r23g-3qw4-gfh2)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2012-6684
Severity: MODERATE · CWE: CWE-79

Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a `javascript:` URI.

Affected packages:
package: ecosystem: RubyGems
name: RedCloth
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 4.3.0