Chartkick Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Chartkick Project records in CISA KEV

No Chartkick Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Chartkick · all components

TI-2020-12782 CVE-2020-16254 · GHSA-3j95-fjv2-3m4p

LOW 29

The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00758 Published 2020-08-05 Fixed in 3.4.0 CWE-74

TI-2019-09523 CVE-2019-12732 · GHSA-g45g-g52h-39rg

LOW 23

The Chartkick gem through 3.1.0 for Ruby allows XSS.

CVSS 3.0MEDIUM 4.7 Network No auth User interaction EPSS 0.00772 Published 2019-06-06 Fixed in 3.2.0 CWE-79