CVE ID:	CVE-2013-0256
Description:	darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2015.235   1.3.6.1.4.1.25623.1.0.865605   1.3.6.1.4.1.25623.1.0.865606
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0256 http://blog.segment7.net/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2 https://bugzilla.redhat.com/show_bug.cgi?id=907820 RedHat Security Advisories: RHSA-2013:0548 http://rhn.redhat.com/errata/RHSA-2013-0548.html RedHat Security Advisories: RHSA-2013:0686 http://rhn.redhat.com/errata/RHSA-2013-0686.html RedHat Security Advisories: RHSA-2013:0701 http://rhn.redhat.com/errata/RHSA-2013-0701.html RedHat Security Advisories: RHSA-2013:0728 http://rhn.redhat.com/errata/RHSA-2013-0728.html http://secunia.com/advisories/52774 SuSE Security Announcement: SUSE-SU-2013:0647 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html SuSE Security Announcement: openSUSE-SU-2013:0303 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-02/msg00048.html http://www.ubuntu.com/usn/USN-1733-1