Skip to content
Sign in
4.0 Medium

CVE-2020-5267 In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript…

Description

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.

Affected products and versions

Product Affected versions Fixed in
actionview 6.0 6.0.0 → < 6.0.2.2 6.0.2.2
actionview 5.2 earliest → < 5.2.4.2 5.2.4.2

Other CVEs of actionview

The 3 CVEs of actionview →
CVE-2026-33168 Action View provides conventions and helpers for building web pages with the Rails framework 2.3 Low CVE-2020-15169 In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in… 5.4 Medium
Track this CVE