CVE-2007-3227: rubyonrails rails Cross-site Scripting

EPSS trend

Probability

3.68%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.68% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotelinuxVerified
Ruby on Rails 1.2.3 To_JSON - Script Injection
Maturity: weaponized

References

18 links

pastie.caboo.se/65550.txtX Refsource CONFIRMWEB
secunia.com/advisories/25699Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryWEB
www.vupen.com/english/advisories/2007/2216VDB EntryX Refsource VUPENVendor AdvisoryWEB
security.gentoo.org/glsa/glsa-200711-17.xmlVendor AdvisoryX Refsource GENTOOWEB
secunia.com/advisories/27756Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryWEB
osvdb.org/36378VDB EntryX Refsource OSVDBWEB
bugs.gentoo.org/show_bug.cgi?id=195315X Refsource CONFIRMWEB
weblog.rubyonrails.org/2007/10/12/rails-1-2-5-maintenance-releaseX Refsource CONFIRMWEB
weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-releaseX Refsource CONFIRMWEB
www.novell.com/linux/security/advisories/2007_24_sr.htmlVendor AdvisoryX Refsource SUSEWEB

Show all 18 references

secunia.com/advisories/27657Third Party AdvisoryX Refsource SECUNIAVendor AdvisoryWEB
dev.rubyonrails.org/ticket/8371X Refsource CONFIRMWEB
www.securityfocus.com/bid/24161VDB EntryX Refsource BIDExploitWEB
security-tracker.debian.org/tracker/CVE-2007-3227Advisory
nvd.nist.gov/vuln/detail/CVE-2007-3227Advisory
github.com/advisories/GHSA-gm25-fpmr-43fjAdvisory
github.com/rails/railsPACKAGE
github.com/rubysec/ruby-advisory-db/blob/master/gems/rails/CVE-2007-3227.ymlWEB

Related vulnerabilities

CVE-2018-16477debianrails+21.31%7y ago30-11-2018 19:00A bypass vulnerability in Active Storage >= 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the `content-disposition` and `content-type` parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as cookie bombing and specially crafted AppCache manifests, an attacker can gain access to private signed URLs within a specific storage path. This vulnerability has been fixed in version 5.2.1.1.CVE-2018-16476debianrails+172.86%7y ago30-11-2018 19:00A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.CVE-2013-1857debianrails+41.85%13y ago19-03-2013 22:00The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : (colon) characters in URLs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name, as demonstrated by including a : sequence.CVE-2013-1855debianrails+42.63%13y ago19-03-2013 22:00The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.CVE-2013-0155debianrails+48.24%13y ago13-01-2013 22:00Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660 and CVE-2012-2694.CVE-2013-0156debianrails+1199.45%13y ago13-01-2013 22:00active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.

All vulnerabilities inrails

CVE-2007-3227: rubyonrails rails Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References