Lucene search
GoogleOSV:GHSA-4P8F-MMFJ-R45GHistoryAug 21, 2019 - 4:15 p.m.
Cross-site scripting in fat_free_crm
2019-08-2116:15:04
Google
osv.dev
9
EPSS
0.001
Percentile
40.3%
Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
References
github.com/fatfreecrm/fat_free_crm/commit/6d60bc8ed010c4eda05d6645c64849f415f68d65
github.com/fatfreecrm/fat_free_crm/compare/v0.17.3...v0.18.1
github.com/fatfreecrm/fat_free_crm/releases/tag/v0.18.1
github.com/rubysec/ruby-advisory-db/blob/master/gems/fat_free_crm/CVE-2018-20975.yml
nvd.nist.gov/vuln/detail/CVE-2018-20975
Related
cve
cve
CVE-2018-20975
2019-08-20 13:15:11
github
github
Cross-site scripting in fat_free_crm
2019-08-21 16:15:04
rubygems
rubygems
fat_free_crm XSS via query parameter of tags_helper method
2019-08-20 21:00:00
osv
osv
CVE-2018-20975
2019-08-20 13:15:11
cvelist
cvelist
CVE-2018-20975
2019-08-20 12:14:26
nvd
nvd
CVE-2018-20975
2019-08-20 13:15:11
veracode
veracode
Cross-site Scripting (XSS)
2019-08-21 07:11:24
prion
prion
Design/Logic Flaw
2019-08-20 13:15:00