CVE-2007-3227: Rubyonrails Rails

Medium severity, CVSS 4.3. EPSS: 3.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606 allows remote attackers to inject arbitrary web script via the input values.

Affected products

• Rubyonrails Rails: version 1.1.5 only

Published 2007-06-14. Last modified 2026-06-16.