Skip to content
OpenAdvisories
Medium DLA-2403-1 1 CVE

rails - security update

Published Oct 9, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 rails 2:4.2.7.1-1+deb9u4

Vulnerabilities 1

  • Medium 5.4
    CVE-2020-15169 Public exploit

    XSS in Action View

    In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow the user to control the default (not found) value of the `t` and `translate` helpers could …

    rails actionview rails rails Debian Ubuntu RubyGems