CVE ID:	CVE-2016-6316
Description:	Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers.
Test IDs:	1.3.6.1.4.1.25623.1.0.809171   1.3.6.1.4.1.25623.1.0.809170   1.3.6.1.4.1.25623.1.0.807379   1.3.6.1.4.1.25623.1.1.1.2.2016.604   1.3.6.1.4.1.25623.1.0.703651   1.3.6.1.4.1.25623.1.0.807380
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6316 BugTraq ID: 92430 http://www.securityfocus.com/bid/92430 Debian Security Information: DSA-3651 (Google Search) http://www.debian.org/security/2016/dsa-3651 http://www.openwall.com/lists/oss-security/2016/08/11/3 https://groups.google.com/forum/#!topic/ruby-security-ann/8B2iV2tPRSE RedHat Security Advisories: RHSA-2016:1855 http://rhn.redhat.com/errata/RHSA-2016-1855.html RedHat Security Advisories: RHSA-2016:1856 http://rhn.redhat.com/errata/RHSA-2016-1856.html RedHat Security Advisories: RHSA-2016:1857 http://rhn.redhat.com/errata/RHSA-2016-1857.html RedHat Security Advisories: RHSA-2016:1858 http://rhn.redhat.com/errata/RHSA-2016-1858.html