1. Home
  2. Mapping Frameworks
  3. CVE Home
  4. actionview

CVE CVE-2020-5267 Mappings

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
CVE-2020-5267 actionview primary_impact T1059 Command and Scripting Interpreter
CVE-2020-5267 actionview secondary_impact T1185 Man in the Browser