CVE-2011-1497

score

<0.1

cvss

6.1

epss

1.3%

published

2021-10-19

kev added

—

first seen

2026-10-21

Rails before 3.0.6 contains a reflected cross-site scripting caused by improper sanitization in the auto_link function, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to load malicious page.