CVE-2012-1099

MEDIUM · CVSS 4.3 EPSS 2.48%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-03-13 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-1099

Severity

MEDIUM

CVSS

4.3

EPSS

2.48%

Original Filing — NVD Description

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain generation of OPTION elements within SELECT elements.