CVE:CVE-2013-0256
CNNVD:CNNVD-201302-284
RDoc是针对Ruby源代码的文档系统。
Ruby中使用的RDoc 2.3.0至3.12版本以及4.0.0.preview2.1之前的4.x版本中的darkfish.js中存在漏洞，该漏洞源于程序没有正确生成文档。通过特制的URL，远程攻击者利用该漏洞进行跨站脚本攻击。
solution:Upgrade ruby-lang rdoc to a higher version than 3.12,4.0.0:preview2,and avoid the version [2.3.0,3.12),4.0.0:preview2; Upgrade ruby-lang ruby to a higher version than 1.9,1.9.1,1.9.2,1.9.3,1.9.3:p0,1.9.3:p125,1.9.3:p194,1.9.3:p286,1.9.3:p383,2.0,2.0.0,2.0.0:rc1,2.0.0:rc2,and avoid the version 1.9,1.9.1,1.9.2,1.9.3,1.9.3:p0,1.9.3:p125,1.9.3:p194,1.9.3:p286,1.9.3:p383,2.0,2.0.0,2.0.0:rc1,2.0.0:rc2; Upgrade canonical ubuntu_linux to a higher version than 12.04,12.10,and avoid the version 12.04,12.10