Skip to content
OpenAdvisories
Medium DLA-2149-1 1 CVE

rails - security update

Published Mar 20, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 rails 2:4.1.8-1+deb8u6

Vulnerabilities 1

  • Medium 4.0
    CVE-2020-5267 Public exploit

    Possible XSS vulnerability in ActionView

    In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions…

    rails actionview rails rails Debian Ubuntu RubyGems