Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cross-Site Scripting (XSS)

🗓️ 20 Dec 2024 06:30:29Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 10 Views

Action Pack has a Cross-Site Scripting vulnerability due to insecure Content-Security-Policy headers.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of the content_security_policy function in the Action Pack interpreter for Ruby allows attackers to perform cross-site scripting (XSS) attacks.
31 Jan 202500:00
–bdu_fstec
Circl		CVE-2024-54133
10 Dec 202422:57
–circl
CNNVD		Rails Action Pack 跨站脚本漏洞
10 Dec 202400:00
–cnnvd
CVE		CVE-2024-54133
10 Dec 202422:52
–cve
Cvelist		CVE-2024-54133 Possible Content Security Policy bypass in Action Dispatch
10 Dec 202422:52
–cvelist
Debian		[SECURITY] [DLA 4383-1] rails security update
25 Nov 202519:57
–debian
Debian		[SECURITY] [DSA 5881-1] rails security update
17 Mar 202519:41
–debian
Debian CVE		CVE-2024-54133
10 Dec 202422:52
–debiancve
Tenable Nessus		Debian dla-4383 : rails - security update
25 Nov 202500:00
–nessus
Tenable Nessus		Debian dsa-5881 : rails - security update
19 Mar 202500:00
–nessus
Rows per page
Vulners
Node
actionpack_projectactionpackRange5.2.0.beta1–7.0.8.6ruby
OR
actionpack_projectactionpackRange7.1.0.beta1–7.1.5ruby
OR
actionpack_projectactionpackRange7.2.0.beta1–7.2.2ruby
OR
actionpack_projectactionpackRange8.0.0.beta1–8.0.0ruby
OR
actionpack_projectactionpackMatch5.2.0ruby
OR
actionpack_projectactionpackMatch5.2.1ruby
OR
actionpack_projectactionpackMatch5.2.1.1ruby
OR
actionpack_projectactionpackMatch5.2.1.rc1ruby
OR
actionpack_projectactionpackMatch5.2.2ruby
OR
actionpack_projectactionpackMatch5.2.2.1ruby
OR
actionpack_projectactionpackMatch5.2.2.rc1ruby
OR
actionpack_projectactionpackMatch5.2.3ruby
OR
actionpack_projectactionpackMatch5.2.3.rc1ruby
OR
actionpack_projectactionpackMatch5.2.4ruby
OR
actionpack_projectactionpackMatch5.2.4.1ruby
OR
actionpack_projectactionpackMatch5.2.4.2ruby
OR
actionpack_projectactionpackMatch5.2.4.3ruby
OR
actionpack_projectactionpackMatch5.2.4.4ruby
OR
actionpack_projectactionpackMatch5.2.4.5ruby
OR
actionpack_projectactionpackMatch5.2.4.6ruby
OR
actionpack_projectactionpackMatch5.2.4.rc1ruby
OR
actionpack_projectactionpackMatch5.2.5ruby
OR
actionpack_projectactionpackMatch5.2.6ruby
OR
actionpack_projectactionpackMatch5.2.6.1ruby
OR
actionpack_projectactionpackMatch5.2.6.2ruby
OR
actionpack_projectactionpackMatch5.2.6.3ruby
OR
actionpack_projectactionpackMatch5.2.7ruby
OR
actionpack_projectactionpackMatch5.2.7.1ruby
OR
actionpack_projectactionpackMatch5.2.8ruby
OR
actionpack_projectactionpackMatch5.2.8.1ruby
OR
actionpack_projectactionpackMatch6.0.0ruby
OR
actionpack_projectactionpackMatch6.0.0.beta1ruby
OR
actionpack_projectactionpackMatch6.0.0.beta2ruby
OR
actionpack_projectactionpackMatch6.0.0.beta3ruby
OR
actionpack_projectactionpackMatch6.0.0.rc1ruby
OR
actionpack_projectactionpackMatch6.0.0.rc2ruby
OR
actionpack_projectactionpackMatch6.0.1ruby
OR
actionpack_projectactionpackMatch6.0.1.rc1ruby
OR
actionpack_projectactionpackMatch6.0.2ruby
OR
actionpack_projectactionpackMatch6.0.2.1ruby
OR
actionpack_projectactionpackMatch6.0.2.2ruby
OR
actionpack_projectactionpackMatch6.0.2.rc1ruby
OR
actionpack_projectactionpackMatch6.0.2.rc2ruby
OR
actionpack_projectactionpackMatch6.0.3ruby
OR
actionpack_projectactionpackMatch6.0.3.1ruby
OR
actionpack_projectactionpackMatch6.0.3.2ruby
OR
actionpack_projectactionpackMatch6.0.3.3ruby
OR
actionpack_projectactionpackMatch6.0.3.4ruby
OR
actionpack_projectactionpackMatch6.0.3.5ruby
OR
actionpack_projectactionpackMatch6.0.3.6ruby
OR
actionpack_projectactionpackMatch6.0.3.7ruby
OR
actionpack_projectactionpackMatch6.0.3.rc1ruby
OR
actionpack_projectactionpackMatch6.0.4ruby
OR
actionpack_projectactionpackMatch6.0.4.1ruby
OR
actionpack_projectactionpackMatch6.0.4.2ruby
OR
actionpack_projectactionpackMatch6.0.4.3ruby
OR
actionpack_projectactionpackMatch6.0.4.4ruby
OR
actionpack_projectactionpackMatch6.0.4.5ruby
OR
actionpack_projectactionpackMatch6.0.4.6ruby
OR
actionpack_projectactionpackMatch6.0.4.7ruby
OR
actionpack_projectactionpackMatch6.0.4.8ruby
OR
actionpack_projectactionpackMatch6.0.5ruby
OR
actionpack_projectactionpackMatch6.0.5.1ruby
OR
actionpack_projectactionpackMatch6.0.6ruby
OR
actionpack_projectactionpackMatch6.0.6.1ruby
OR
actionpack_projectactionpackMatch6.1.0ruby
OR
actionpack_projectactionpackMatch6.1.0.rc1ruby
OR
actionpack_projectactionpackMatch6.1.0.rc2ruby
OR
actionpack_projectactionpackMatch6.1.1ruby
OR
actionpack_projectactionpackMatch6.1.2ruby
OR
actionpack_projectactionpackMatch6.1.2.1ruby
OR
actionpack_projectactionpackMatch6.1.3ruby
OR
actionpack_projectactionpackMatch6.1.3.1ruby
OR
actionpack_projectactionpackMatch6.1.3.2ruby
OR
actionpack_projectactionpackMatch6.1.4ruby
OR
actionpack_projectactionpackMatch6.1.4.1ruby
OR
actionpack_projectactionpackMatch6.1.4.2ruby
OR
actionpack_projectactionpackMatch6.1.4.3ruby
OR
actionpack_projectactionpackMatch6.1.4.4ruby
OR
actionpack_projectactionpackMatch6.1.4.5ruby
OR
actionpack_projectactionpackMatch6.1.4.6ruby
OR
actionpack_projectactionpackMatch6.1.4.7ruby
OR
actionpack_projectactionpackMatch6.1.5ruby
OR
actionpack_projectactionpackMatch6.1.5.1ruby
OR
actionpack_projectactionpackMatch6.1.6ruby
OR
actionpack_projectactionpackMatch6.1.6.1ruby
OR
actionpack_projectactionpackMatch6.1.7ruby
OR
actionpack_projectactionpackMatch6.1.7.1ruby
OR
actionpack_projectactionpackMatch6.1.7.10ruby
OR
actionpack_projectactionpackMatch6.1.7.2ruby
OR
actionpack_projectactionpackMatch6.1.7.3ruby
OR
actionpack_projectactionpackMatch6.1.7.4ruby
OR
actionpack_projectactionpackMatch6.1.7.5ruby
OR
actionpack_projectactionpackMatch6.1.7.6ruby
OR
actionpack_projectactionpackMatch6.1.7.7ruby
OR
actionpack_projectactionpackMatch6.1.7.8ruby
OR
actionpack_projectactionpackMatch6.1.7.9ruby
OR
actionpack_projectactionpackMatch7.0.0ruby
OR
actionpack_projectactionpackMatch7.0.0.alpha1ruby
OR
actionpack_projectactionpackMatch7.0.0.alpha2ruby
OR
actionpack_projectactionpackMatch7.0.0.rc1ruby
OR
actionpack_projectactionpackMatch7.0.0.rc2ruby
OR
actionpack_projectactionpackMatch7.0.0.rc3ruby
OR
actionpack_projectactionpackMatch7.0.1ruby
OR
actionpack_projectactionpackMatch7.0.2ruby
OR
actionpack_projectactionpackMatch7.0.2.1ruby
OR
actionpack_projectactionpackMatch7.0.2.2ruby
OR
actionpack_projectactionpackMatch7.0.2.3ruby
OR
actionpack_projectactionpackMatch7.0.2.4ruby
OR
actionpack_projectactionpackMatch7.0.3ruby
OR
actionpack_projectactionpackMatch7.0.3.1ruby
OR
actionpack_projectactionpackMatch7.0.4ruby
OR
actionpack_projectactionpackMatch7.0.4.1ruby
OR
actionpack_projectactionpackMatch7.0.4.2ruby
OR
actionpack_projectactionpackMatch7.0.4.3ruby
OR
actionpack_projectactionpackMatch7.0.5ruby
OR
actionpack_projectactionpackMatch7.0.5.1ruby
OR
actionpack_projectactionpackMatch7.0.6ruby
OR
actionpack_projectactionpackMatch7.0.7ruby
OR
actionpack_projectactionpackMatch7.0.7.1ruby
OR
actionpack_projectactionpackMatch7.0.7.2ruby
OR
actionpack_projectactionpackMatch7.0.8ruby
OR
actionpack_projectactionpackMatch7.0.8.1ruby
OR
actionpack_projectactionpackMatch7.0.8.2ruby
OR
actionpack_projectactionpackMatch7.0.8.3ruby
OR
actionpack_projectactionpackMatch7.0.8.4ruby
OR
actionpack_projectactionpackMatch7.0.8.5ruby
OR
actionpack_projectactionpackMatch7.1.0ruby
OR
actionpack_projectactionpackMatch7.1.1ruby
OR
actionpack_projectactionpackMatch7.1.2ruby
OR
actionpack_projectactionpackMatch7.1.3ruby
OR
actionpack_projectactionpackMatch7.1.3.1ruby
OR
actionpack_projectactionpackMatch7.1.3.2ruby
OR
actionpack_projectactionpackMatch7.1.3.3ruby
OR
actionpack_projectactionpackMatch7.1.3.4ruby
OR
actionpack_projectactionpackMatch7.1.4ruby
OR
actionpack_projectactionpackMatch7.1.4.1ruby
OR
actionpack_projectactionpackMatch7.1.4.2ruby
OR
actionpack_projectactionpackMatch7.2.0ruby
OR
actionpack_projectactionpackMatch7.2.1ruby
OR
actionpack_projectactionpackMatch7.2.1.1ruby
OR
actionpack_projectactionpackMatch7.2.1.2ruby

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Dec 2025 08:09Current
6.1Medium risk
Vulners AI Score6.1
CVSS 42.3
EPSS0.0019
SSVC
cross-site scriptingaction packcontent-security-policysecurity vulnerabilityweb application
10