Debian Security Advisory 1887-1 – Brian Mastenbrook discovered that rails, the MVC ruby based framework geared for web application development, is prone to cross-site scripting attacks via malformed strings in the form helper.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/81351/dsa-1887-1.txt
Source: https://packetstormsecurity.com/files/81351/Debian-Linux-Security-Advisory-1887-1.html