Vulnerability · Published Mar 19, 2020 · Assigned by GitHub_M
CVE-2020-5267Possible XSS vulnerability in ActionView
Medium 4.0
In plain English
A medium-severity security flaw in actionview from rails. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 75% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | rails | 2:5.2.4.1+dfsg-2 | DEBIAN-CVE-2020-5267 |
| Debian:13 | rails | 2:5.2.4.1+dfsg-2 | DEBIAN-CVE-2020-5267 |
| Debian:14 | rails | 2:5.2.4.1+dfsg-2 | DEBIAN-CVE-2020-5267 |
| RubyGems | actionview | 5.2.4.2 | GHSA-65cv-r6x7-79hv |
| RubyGems | actionview | 6.0.2.2 | GHSA-65cv-r6x7-79hv |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| rails | actionview | < 5.2.4.2>= 6.0.0, < 6.0.2.2 |
Weakness: CWE-80 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
References
- https://github.com/rails/rails/security/advisories/GHSA-65cv-r6x7-79hv x_refsource_CONFIRM
- https://github.com/rails/rails/commit/033a738817abd6e446e1b320cb7d1a5c15224e9a x_refsource_MISC
- [oss-security] 20200319 [CVE-2020-5267] Possible XSS vulnerability in ActionView mailing-list, x_refsource_MLIST
- [debian-lts-announce] 20200320 [SECURITY] [DLA 2149-1] rails security update mailing-list, x_refsource_MLIST
- openSUSE-SU-2020:0627 vendor-advisory, x_refsource_SUSE
- FEDORA-2020-4dd34860a3 vendor-advisory, x_refsource_FEDORA