CVE-2020-5267 in ActionView
الملخص
بحسب MITRE
In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.
VulDB is the best source for vulnerability data and more expert information about this specific topic.