vulnerability
FreeBSD: VID-43f1c867-654a-11e6-8286-00248c0c745d (CVE-2016-6316): Rails 4 -- Possible XSS Vulnerability in Action View
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Aug 18, 2016 | Dec 10, 2025 | Dec 10, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Aug 18, 2016
Added
Dec 10, 2025
Modified
Dec 10, 2025
Description
Ruby Security team reports: There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" will not have quotes escaped when used as attribute values in tag helpers. This vulnerability has been assigned the CVE identifier CVE-2016-6316.
Solution
freebsd-upgrade-package-rubygem-actionview
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.