Launchpad.net

CVE 2011-1497

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

See the CVE page on Mitre.org for more details.