RedCloth Library up to 4.2.9 on Ruby cross site scripting

Summaryinfo

A vulnerability described as problematic has been identified in RedCloth Library up to 4.2.9 on Ruby. Affected by this issue is some unknown functionality. Such manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2012-6684. The attack can be launched remotely. Moreover, an exploit is present.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in RedCloth Library up to 4.2.9 on Ruby (Software Library). Affected by this issue is an unknown code block. The manipulation with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Impacted is integrity. CVE summarizes:

Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.

The weakness was disclosed 04/22/2023 as 243. The advisory is available at jgarber.lighthouseapp.com. This vulnerability is handled as CVE-2012-6684 since 01/05/2015. The attack may be launched remotely. No form of authentication is required for exploitation. Successful exploitation requires user interaction by the victim. Technical details are unknown but a public exploit is available. This vulnerability is assigned to T1059.007 by the MITRE ATT&CK project.

The exploit is available at co3k.org. It is declared as proof-of-concept. The vulnerability scanner Nessus provides a plugin with the ID 82151 (Debian DLA-167-1 : redcloth security update), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Debian Local Security Checks. The commercial vulnerability scanner Qualys is able to test this issue with plugin 175306 (Debian Security Update for ruby-redcloth (DSA 3168-1)).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (82151). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Software Library

Name

• RedCloth Library

Version

• 4.2.0
• 4.2.1
• 4.2.2
• 4.2.3
• 4.2.4
• 4.2.5
• 4.2.6
• 4.2.7
• 4.2.8
• 4.2.9

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion