Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This vulnerability is in the Actionable Exceptions middleware.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Rails 跨站脚本漏洞
Vulnerability Description
Rails是Rails团队的一套基于Ruby语言的开源Web应用框架。 Rails >= 6.0.0版本中存在跨站脚本漏洞。当应用程序运行在开发模式时，可能存在XSS漏洞，允许攻击者发送或嵌入(在另一个页面中)一个特别制作的URL，从而允许攻击者在本地应用程序的上下文中执行Javascript。
CVSS Information
N/A
Vulnerability Type
N/A