CVE-2020-8264
1 advisory.
RubyGems/actionpack CVE-2020-8264: medium 6.1
Cross-site scripting in actionpack
Action: Upgrade actionpack to 6.0.3.4 or later.
bundle update actionpackAffected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.0.3.4 | - |
Fixed versions
| 6.0.3.4 |
Sources
- osv: GHSA-35mm-cc6r-8fjp
- https://nvd.nist.gov/vuln/detail/CVE-2020-8264
- https://hackerone.com/reports/904059
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2020-8264.yml
- https://groups.google.com/g/rubyonrails-security/c/yQzUVfv42jk
- https://groups.google.com/g/rubyonrails-security/c/yQzUVfv42jk/m/oJWw-xhNAQAJ
CVE-2020-8264 · published · modified · JSON