Known vulnerabilities in ActionView

Vendor: Rails
Software: ActionView
Software CPE: cpe:2.3:a:rails:actionview:*:*:*:*:*:ruby_on_rails:*:*
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ActionView ActionView is affected by 6 known vulnerabilities: 1 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73275 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23913
CWE-79 Medium
No
No
6.1.7.3, 7.0.4.3 14.03.2023 SB2023031410
SB2023041501
SB2023092739
and 3 more
#VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28120
CWE-79 Medium
No
No
6.1.7.3, 7.0.4.3 14.03.2023 SB2023031410
SB2023041501
SB2023042648
and 13 more
#VU46724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15169
CWE-79 Low
No
No
5.2.4.4, 6.0.3.3 11.09.2020 SB2020091507
SB2020092504
SB2023042728
and 3 more
#VU28242 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8163
CWE-94 High
Available
No
5.0.1 26.05.2020 SB2020052604
#VU28241 - Cross-Site Request Forgery (CSRF)
CVE-2020-8167
CWE-352 Low
No
No
5.2.4.3, 6.0.3.1 26.05.2020 SB2020052603
SB2020092504
SB2023042728
#VU26248 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5267
CWE-79 Low
Available
No
5.2.4.2, 6.0.2.2 20.03.2020 SB2020032004
SB2020051128
SB2020092525
and 1 more