Skip to content
OpenAdvisories

Vendor

rails

68 known vulnerabilities.

Products

rails 35 rails-html-sanitizer 11 activestorage 6 activesupport 5 actionview 3 https://github.com/rails/rails 3 actionpack 1 Rack 1 rails-ujs 1 Kredis JSON 1 Action Pack 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-26144 Public exploit

    Possible Sensitive Session Information Leak in Active Storage

    Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also …

    rails rails rails rails Debian Ubuntu RubyGems
  • Medium 5.4
    CVE-2020-15169 Public exploit

    XSS in Action View

    In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow the user to control the default (not found) value of the `t` and `translate` helpers could …

    rails actionview rails rails Debian Ubuntu RubyGems
  • Medium 4.0
    CVE-2020-5267 Public exploit

    Possible XSS vulnerability in ActionView

    In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions…

    rails actionview rails rails Debian Ubuntu RubyGems