CVE-2012-3463

score

<0.1

cvss

4.3

epss

1.3%

published

2012-08-10

kev added

—

first seen

2026-10-21

Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 contain a reflected XSS caused by unsanitized input in select_tag helper, letting remote attackers inject arbitrary web script or HTML, exploit requires attacker to supply malicious prompt field input.