Lucene search
Veracode Vulnerability DatabaseVERACODE:20436HistoryJun 06, 2019 - 2:09 a.m.
Cross-site Scripting (XSS)
2019-06-0602:09:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.001
Percentile
44.6%
Chartkick is vulnerable to Cross-Site Scripting. The JSON data passed to the chartkick_chart function is not properly sanitised, thus allowing an attacker to input malicious data to execute arbitrary Javascript code on the victim’s browser.
Related
github
github
Cross-site Scripting in Chartkick
2019-06-07 20:56:42
nvd
nvd
CVE-2019-12732
2019-06-06 15:29:01
rubygems
rubygems
XSS Vulnerability in Chartkick Ruby Gem
2019-06-03 21:00:00
osv
osv
Cross-site Scripting in Chartkick
2019-06-07 20:56:42
CVE-2019-12732
2019-06-06 15:29:01
cvelist
cvelist
CVE-2019-12732
2019-06-06 14:54:18
cve
cve
CVE-2019-12732
2019-06-06 15:29:01
prion
prion
Cross site scripting
2019-06-06 15:29:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34