Lucene search
+L

4 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 4:01 a.m.•7 views

SUSE CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS6.1AI score0.66986EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2021/04/07 8:58 p.m.•64 views

Cross-site scripting in actionpack

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS5.7AI score0.66986EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2021/01/06 9:15 p.m.•13 views

DEBIAN-CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS6.2AI score0.66986EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/06 12:00 a.m.•6 views

CVE-2020-8264: Improper Neutralization of Input During Web Page Generation

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

6.1CVSS6.1AI score0.66986EPSS
SaveExploits1References3
Rows per page
Query Builder