Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 4.0 | Medium | 3.1 | CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N | CNA (GitHub_M) |
- CISA KEV Not listed.
- EPSS 0.015, the 74th percentile, on 9 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
- 19 Mar 2020, 16:55 UTC Published by the maintainers as a GitHub repository advisory
Sources
- GitHub Advisory Database: GHSA-65cv-r6x7-79hv
- OSV: GHSA-65cv-r6x7-79hv
- github.com/rails/rails/security/advisories/GHSA-65cv-r6x7-79hv
- nvd.nist.gov/vuln/detail/CVE-2020-5267
- github.com/rails/rails/commit/033a738817abd6e446e1b320cb7d1a5c15224e9a
- github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2020-5267.yml
- groups.google.com/forum/#!topic/rubyonrails-security/55reWMM_Pg8
- lists.debian.org/debian-lts-announce/2020/03/msg00022.html
- lists.fedoraproject.org/archives/list/[email protected]/message/XJ7NUWXAEVRQCROIIBV4C6WXO6IR3KSB
- lists.opensuse.org/opensuse-security-announce/2020-05/msg00019.html
- www.openwall.com/lists/oss-security/2020/03/19/1