Read the docs

Rails

Records164All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9

Exploited now

Rails records in CISA KEV
TI-2019-03828 Rails Ruby on Rails Path Traversal Vulnerability Priority CRITICAL 90KEV 2025-07-07TI-2014-00124 Ruby on Rails Directory Traversal Vulnerability Priority CRITICAL 92KEV 2022-03-25TI-2016-00672 Ruby on Rails Directory Traversal Vulnerability Priority CRITICAL 90KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Rails 118 records CRITICAL Ruby On Rails 49 records HIGH Rails Html Sanitizers 10 records MEDIUM Html Sanitizer 4 records LOW Actionpack 2 records LOW Actionpack Page-caching 2 records MEDIUM Actionview 1 record LOW Active Record Session Store 1 record LOW

Records

1 record in Actionview · all components

TI-2020-04323 CVE-2020-5267 · GHSA-65cv-r6x7-79hv

Possible XSS vulnerability in ActionView

Priority LOW 25

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01525 Published 2020-03-19 Partial fix · 5.2.4.2, 6.0.2.2 CWE-80
Open these records in search →