CVE-2012-3465

score

<0.1

cvss

4.3

epss

2.0%

published

2012-08-10

kev added

—

first seen

2026-10-21

Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 contain a reflected cross-site scripting caused by improper sanitization in strip_tags helper in actionpack, letting remote attackers inject arbitrary web script or HTML via malformed HTML markup, exploit requires sending crafted HTML content.