Lucene search

XSS in Action View

🗓️ 11 Sep 2020 15:57:19Reported by GitHub Advisory DatabaseType

Potential XSS vulnerability in Action View's translation helpers. Unescaped HTML-safe default strings can lead to XSS attacks. Patched versions available

Reporter	Title	Published	Views	Family All 69
OSV	CVE-2020-15169	11 Sep 202016:15	–	osv
OSV	rails - security update	9 Oct 202000:00	–	osv
OSV	XSS in Action View	11 Sep 202015:19	–	osv
OSV	rails - security update	24 Sep 202000:00	–	osv
OSV	rmt-server-2.6.13-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	Red Hat Security Advisory: Satellite 6.9 Release	29 Sep 202417:48	–	osv
Cvelist	CVE-2020-15169 XSS in Action View	11 Sep 202015:50	–	cvelist
NVD	CVE-2020-15169	11 Sep 202016:15	–	nvd
Tenable Nessus	Debian DLA-2403-1 : rails security update	12 Oct 202000:00	–	nessus
Tenable Nessus	FreeBSD : Rails -- Potential XSS vulnerability (7b630362-f468-11ea-a96c-08002728f74c)	14 Sep 202000:00	–	nessus

Vulners

Node

-actionviewRange≤5.2.4.3

-actionviewRange6.0.0.0–6.0.3.2

Source	Link
github	www.github.com/rails/rails/security/advisories/GHSA-cfjv-5498-mph5
github	www.github.com/rails/rails/commit/e663f084460ea56c55c3dc76f78c7caeddeeb02e
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15169
debian	www.debian.org/security/2020/dsa-4766
lists	www.lists.debian.org/debian-lts-announce/2020/10/msg00015.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/XJ7NUWXAEVRQCROIIBV4C6WXO6IR3KSB/
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2020-15169.yml
groups	www.groups.google.com/g/rubyonrails-security/c/b-C9kSGXYrc
github	www.github.com/advisories/GHSA-cfjv-5498-mph5

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Sep 2020 15:19Current

0.9Low risk

Vulners AI Score0.9

EPSS0.022

CWE-79