exploitDog

CVE-2020-36190

Опубликовано: 12 янв. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.

Ссылки

https://github.com/sferik/rails_admin/blob/master/README.md
Exploit
Third Party Advisory
https://github.com/sferik/rails_admin/commit/d72090ec6a07c3b9b7b48ab50f3d405f91ff4375
Patch
Third Party Advisory
https://github.com/sferik/rails_admin/compare/v1.4.2...v1.4.3
Patch
Third Party Advisory
https://github.com/sferik/rails_admin/blob/master/README.md
Exploit
Third Party Advisory
https://github.com/sferik/rails_admin/commit/d72090ec6a07c3b9b7b48ab50f3d405f91ff4375
Patch
Third Party Advisory
https://github.com/sferik/rails_admin/compare/v1.4.2...v1.4.3
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rails_admin_project:rails_admin:*:*:*:*:*:ruby:*:*

Версия до 1.4.3 (исключая)

cpe:2.3:a:rails_admin_project:rails_admin:*:*:*:*:*:ruby:*:*

Версия от 2.0.0 (включая) до 2.0.2 (исключая)

EPSS

Процентиль: 53%

0.00307

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-wjx2-7hqq-8h7m

CVSS3: 6.1

github

около 5 лет назад

rails_admin ruby gem XSS vulnerability

EPSS

Процентиль: 53%

0.00307

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79