Beveiligingsadvies

CVE-2020-5267

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-19 17:30:16

Laatst bijgewerkt 2024-08-04 08:22:09

Toegewezen door GitHub_M

CVSS-score 4.0

Status PUBLISHED

Beschrijving

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.

← Alle CVE's bekijken Bekijk op cve.org ↗