Lucene search
Veracode Vulnerability DatabaseVERACODE:27559HistoryOct 12, 2020 - 5:58 a.m.
Cross-site Scripting (XSS)
2020-10-1205:58:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
29.2%
ActionPack is vulnerable to cross-site scripting (XSS). An attacker is able to embed a specially crafted URL via the location parameter in Actionable Exceptions middleware while the application server is in development mode, leading to the execution of malicious JavaScript in the context of the local application.
Related
ubuntucve
ubuntucve
CVE-2020-8264
2021-01-06 00:00:00
osv
osv
Cross-site scripting in actionpack
2021-04-07 20:58:47
CVE-2020-8264
2021-01-06 21:15:14
prion
prion
Cross site scripting
2021-01-06 21:15:00
nvd
nvd
CVE-2020-8264
2021-01-06 21:15:14
cve
cve
CVE-2020-8264
2021-01-06 21:15:14
redhatcve
redhatcve
CVE-2020-8264
2020-10-08 18:52:03
debiancve
debiancve
CVE-2020-8264
2021-01-06 21:15:14
rubygems
rubygems
Possible XSS Vulnerability in Action Pack in Development Mode
2020-10-06 21:00:00
cvelist
cvelist
CVE-2020-8264
2021-01-06 21:02:35
freebsd
freebsd
Rails -- Possible XSS vulnerability
2020-10-07 00:00:00
github
github
Cross-site scripting in actionpack
2021-04-07 20:58:47
nessus
nessus
hackerone
hackerone
Ruby on Rails: Open Redirect (6.0.0 < rails < 6.0.3.2)
2020-06-21 02:15:14