Test ID:	1.3.6.1.4.1.25623.1.1.10.2014.0054
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2014-0054)
Summary:	The remote host is missing an update for the 'ruby-will_paginate' package(s) announced via the MGASA-2014-0054 advisory.
Description:	Summary: The remote host is missing an update for the 'ruby-will_paginate' package(s) announced via the MGASA-2014-0054 advisory. Vulnerability Insight: Updated ruby-will_paginate packages fix security vulnerability: Cross-Site Scripting (XSS) vulnerabilities were found in will_paginate gem for Ruby, where certain input related to generated pagination links were not properly sanitised before being returned. This could be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. (CVE-2013-6459). Affected Software/OS: 'ruby-will_paginate' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6459 BugTraq ID: 64509 http://www.securityfocus.com/bid/64509 RedHat Security Advisories: RHSA-2018:0336 https://access.redhat.com/errata/RHSA-2018:0336 http://secunia.com/advisories/56180
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.