Read the docs
TI-2020-04323 Aliases CVE-2020-5267GHSA-65cv-r6x7-79hv

Possible XSS vulnerability in ActionView

Priority LOW 25CWE-80Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Partial Red Hat: 2 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-80.

Summary

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.

Why it matters now

EPSS 0.01525 74th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Partial actionview (rails): 5.2.4.2, 6.0.2.2actionview (RubyGems): 5.2.4.2, 6.0.2.2Red Hat: 1 advisoryRed Hat: 2 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Railsactionviewbefore 5.2.4.2; 6.0.0 to before 6.0.2.25.2.4.2, 6.0.2.2Patch availableCNA
—actionview (RubyGems)before 5.2.4.25.2.4.2Patch availableGHSA-65cv-r6x7-79hv
—actionview (RubyGems)6.0.0 to before 6.0.2.26.0.2.2Patch availableGHSA-65cv-r6x7-79hv
  • actionview VendorRails Affected before 5.2.4.2; 6.0.0 to before 6.0.2.2 Fixed in 5.2.4.2, 6.0.2.2 Patch available CNA
  • actionview (RubyGems) Vendor— Affected before 5.2.4.2 Fixed in 5.2.4.2 Patch available GHSA-65cv-r6x7-79hv
  • actionview (RubyGems) Vendor— Affected 6.0.0 to before 6.0.2.2 Fixed in 6.0.2.2 Patch available GHSA-65cv-r6x7-79hv

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:a:rubyonrails:actionview:*:*:*:*:*:*:*:*before 5.2.4.2; 6.0.0 to before 6.0.2.2VulnerableRails
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*33VulnerableFedoraproject
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
  • cpe:2.3:a:rubyonrails:actionview:*:*:*:*:*:*:*:* Versions before 5.2.4.2; 6.0.0 to before 6.0.2.2 Vulnerable ·Rails
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* Versions 33 Vulnerable ·Fedoraproject
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE

Remediation

  • Fix · CNA actionview (rails) Fixed in 5.2.4.2, 6.0.2.2
  • Fix · GHSA-65cv-r6x7-79hv actionview (RubyGems) Fixed in 5.2.4.2 Advisory →
  • Fix · GHSA-65cv-r6x7-79hv actionview (RubyGems) Fixed in 6.0.2.2 Advisory →

Red Hat 1 advisory

  • RHSA-2020:4366 Released 2020-10-27 · Red Hat rating Important
    Satellite 6.8 release
    • Red Hat Satellite 6.8 ansible-collection-redhat-satellite-1.3.0-1.el7sat, ansible-runner-1.4.6-1.el7ar, ansiblerole-foreman_scap_client-0.0.5-1.el7sat +47
    • Red Hat Satellite Capsule 6.8 ansible-collection-redhat-satellite-1.3.0-1.el7sat, ansible-runner-1.4.6-1.el7ar, ansiblerole-foreman_scap_client-0.0.5-1.el7sat +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
CloudForms Management Engine 5AffectedNo fix planned: Will not fix
Red Hat Software CollectionsAffectedNo fix planned: Will not fix
Red Hat Satellite 6.8Fixed RHSA-2020:4366
Red Hat Satellite Capsule 6.8Fixed RHSA-2020:4366

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-5267
  2. 2026-10-03 Alias added: GHSA-65cv-r6x7-79hv

References

Exploit 2

Patch 1

Advisory 4

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences