Lucene search
+L

2 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.10 views

The vulnerability of the `escape_javascript` function in the `javascript_helper.rb` component of the ActionView programming platform for Ruby on Rails allows attackers to compromise data integrity.

The vulnerability of the escapejavascript function in the javascripthelper.rb component of the ActionView programming platform for the Ruby on Rails framework is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an...

4.8CVSS6.5AI score0.01543EPSS
SaveExploits1References9Affected Software3
OSV
OSV
added 2020/03/19 6:15 p.m.2 views

DEBIAN-CVE-2020-5267

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the j or escapejavascript methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2...

4.8CVSS6.1AI score0.01543EPSS
SaveExploits1References1
Rows per page
Query Builder