vulnerability
FreeBSD: VID-95F306A6-0AEE-11EB-ADD4-08002728F74C (CVE-2020-8264): Rails -- Possible XSS vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Oct 7, 2020 | Oct 11, 2020 | Jan 14, 2021 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Oct 7, 2020
Added
Oct 11, 2020
Modified
Jan 14, 2021
Description
Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.
From VID-95F306A6-0AEE-11EB-ADD4-08002728F74C:
Ruby on Rails blog:
Rails version 6.0.3.4 has been released! This version is a security
release and addresses one possible XSS attack vector in Actionable
Exceptions.
Solution
freebsd-upgrade-package-rubygem-actionpack60
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.