rubyonrails actionview CVE-2020-5267 vulnerability in Ruby on Rails and Other Products
Published on March 19, 2020

Possible XSS vulnerability in ActionView

product logo product logo product logo product logo
In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.

Github Repository Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2020-5267 can be exploited with network access, requires user interaction and user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
REQUIRED
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
NONE

Weakness Type

What is a Basic XSS Vulnerability?

The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. This may allow such characters to be treated as control characters, which are executed client-side in the context of the user's session. Although this can be classified as an injection problem, the more pertinent issue is the improper conversion of such special characters to respective context-appropriate entities before displaying them to the user.

CVE-2020-5267 has been classified to as a Basic XSS vulnerability or weakness.


Products Associated with CVE-2020-5267

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-5267 are published in these products:

Ruby on Rails Actionview
 
Debian Linux
 
Fedora Project Fedora
 
OpenSuse Leap
 

Affected Versions

rails actionview:

Vulnerable Packages

The following package name and versions may be associated with CVE-2020-5267

Package Manager Vulnerable Package Versions Fixed In
rubygems actionview <= 5.2.4.1 5.2.4.2
rubygems actionview >= 6.0.0, <= 6.0.2.1 6.0.2.2

Exploit Probability

EPSS
0.89%
Percentile
75.13%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.