CVE-2020-5267

CVE-2020-5267 is an XSS vulnerability in ActionView’s JavaScript literal escape helpers. It affects Rails ActionView before 6.0.2.2 and 5.2.4.2, where views using j or escape_javascript may be vulnerable. The issue is fixed in version 6.0.2.2 and 5.2.4.2. Public connected documents corroborate th...