Vulnerabilities > CVE-2020-15169

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

action-view-project

debian

fedoraproject

NVD

Published: 2020-09-11

Updated: 2024-11-21

Summary

In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow the user to control the default (not found) value of the `t` and `translate` helpers could be susceptible to XSS attacks. When an HTML-unsafe string is passed as the default for a missing translation key named html or ending in _html, the default string is incorrectly marked as HTML-safe and not escaped. This is patched in versions 6.0.3.3 and 5.2.4.4. A workaround without upgrading is proposed in the source advisory.

Vulnerable Configurations

Part	Description	Count
Application	Action_View_Project Action View Project Action View 4.1.0 Action View Project Action View 4.1.1 Action View Project Action View 4.1.2 Action View Project Action View 4.1.3 Action View Project Action View 4.1.4 Action View Project Action View 4.1.5 Action View Project Action View 4.1.6 Action View Project Action View 4.1.7 Action View Project Action View 4.1.7.1 Action View Project Action View 4.1.8 Action View Project Action View 4.1.9 Action View Project Action View 4.1.10 Action View Project Action View 4.1.11 Action View Project Action View 4.1.12 Action View Project Action View 4.1.13 Action View Project Action View 4.1.14 Action View Project Action View 4.1.14.1 Action View Project Action View 4.1.14.2 Action View Project Action View 4.1.15 Action View Project Action View 4.1.16 Action View Project Action View 4.2.0 Action View Project Action View 4.2.1 Action View Project Action View 4.2.2 Action View Project Action View 4.2.3 Action View Project Action View 4.2.4 Action View Project Action View 4.2.5 Action View Project Action View 4.2.5.1 Action View Project Action View 4.2.5.2 Action View Project Action View 4.2.6 Action View Project Action View 4.2.7 Action View Project Action View 4.2.7.1 Action View Project Action View 4.2.8 Action View Project Action View 4.2.9 Action View Project Action View 4.2.10 Action View Project Action View 4.2.11 Action View Project Action View 4.2.11.1 Action View Project Action View 4.2.11.2 Action View Project Action View 4.2.11.3 Action View Project Action View 5.0.0 Action View Project Action View 5.0.0.1 Action View Project Action View 5.0.1 Action View Project Action View 5.0.2 Action View Project Action View 5.0.3 Action View Project Action View 5.0.4 Action View Project Action View 5.0.5 Action View Project Action View 5.0.6 Action View Project Action View 5.0.7 Action View Project Action View 5.0.7.1 Action View Project Action View 5.0.7.2 Action View Project Action View 5.1.0 Action View Project Action View 5.1.1 Action View Project Action View 5.1.2 Action View Project Action View 5.1.3 Action View Project Action View 5.1.4 Action View Project Action View 5.1.5 Action View Project Action View 5.1.6 Action View Project Action View 5.1.6.1 Action View Project Action View 5.1.6.2 Action View Project Action View 5.1.7 Action View Project Action View 5.2.0 Action View Project Action View 5.2.1 Action View Project Action View 5.2.1.1 Action View Project Action View 5.2.2 Action View Project Action View 5.2.2.1 Action View Project Action View 5.2.3 Action View Project Action View 5.2.4 Action View Project Action View 5.2.4.1 Action View Project Action View 5.2.4.2 Action View Project Action View 5.2.4.3 Action View Project Action View 6.0.1 Action View Project Action View 6.0.2 Action View Project Action View 6.0.2.1 Action View Project Action View 6.0.2.2 Action View Project Action View 6.0.3 Action View Project Action View 6.0.3.1 Action View Project Action View 6.0.3.2	138
OS	Debian Debian Debian Linux 10.0	1
OS	Fedoraproject Fedoraproject Fedora 33	1

Vulnerabilities > CVE-2020-15169 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-15169"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-15169