CVE-2020-5267

MEDIUM

ActionView < 5.2.4.2 - Cross-Site Scripting via JavaScript Literal Escape Helpers

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-5267. PoCs published by GUI.

AI-analyzed exploit summary This repository provides a patch for CVE-2020-5267, a vulnerability in Rails 4 and Rails 3 related to insufficient escaping in JavaScript helper methods. It includes a monkey patch to address the issue by extending the JS_ESCAPE_MAP to handle backticks and dollar signs, along with tests to verify the fix.

Description

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.

Exploits (1)

nomisec WRITEUP 1 stars
by GUI · poc
https://github.com/GUI/legacy-rails-CVE-2020-5267-patch

This repository provides a patch for CVE-2020-5267, a vulnerability in Rails 4 and Rails 3 related to insufficient escaping in JavaScript helper methods. It includes a monkey patch to address the issue by extending the JS_ESCAPE_MAP to handle backticks and dollar signs, along with tests to verify the fix.

Classification
Writeup 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Rails 4 and Rails 3
No auth needed
Prerequisites: Use of Rails 4 or Rails 3 with vulnerable JavaScript helper methods
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit, Patch, Third Party Advisory x_refsource_confirm
https://github.com/rails/rails/security/advisories/GHSA-65cv-r6x7-79hv
Exploit, Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/03/19/1
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2020/03/msg00022.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00019.html

Scores

CVSS v3 4.0
EPSS 0.0089
EPSS Percentile 76.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-80 CWE-79
Status published
Products (5)
debian/debian_linux 8.0
fedoraproject/fedora 33
opensuse/leap 15.1
rubygems/actionview 0 - 5.2.4.2RubyGems
rubyonrails/actionview < 5.2.4.2
Published Mar 19, 2020
Tracked Since Feb 18, 2026