Vulnerability Details CVE-2020-36190
RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- https://github.com/sferik/rails_admin/blob/master/README.md
- https://github.com/sferik/rails_admin/commit/d72090ec6a07c3b9b7b48ab50f3d405f91ff4375
- https://github.com/sferik/rails_admin/compare/v1.4.2...v1.4.3
- https://github.com/sferik/rails_admin/blob/master/README.md
- https://github.com/sferik/rails_admin/commit/d72090ec6a07c3b9b7b48ab50f3d405f91ff4375
- https://github.com/sferik/rails_admin/compare/v1.4.2...v1.4.3
Products affected by CVE-2020-36190
-
cpe:2.3:a:rails_admin_project:rails_admin:-
-
cpe:2.3:a:rails_admin_project:rails_admin:0.0.1
-
cpe:2.3:a:rails_admin_project:rails_admin:0.0.2
-
cpe:2.3:a:rails_admin_project:rails_admin:0.0.3
-
cpe:2.3:a:rails_admin_project:rails_admin:0.0.4
-
cpe:2.3:a:rails_admin_project:rails_admin:0.0.5
-
cpe:2.3:a:rails_admin_project:rails_admin:0.1.0
-
cpe:2.3:a:rails_admin_project:rails_admin:0.1.1
-
cpe:2.3:a:rails_admin_project:rails_admin:0.1.2
-
cpe:2.3:a:rails_admin_project:rails_admin:0.2.0
-
cpe:2.3:a:rails_admin_project:rails_admin:0.3.0
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.0
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.1
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.2
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.3
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.4
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.5
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.6
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.7
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.8
-
cpe:2.3:a:rails_admin_project:rails_admin:0.4.9
-
cpe:2.3:a:rails_admin_project:rails_admin:0.5.0
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.0
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.1
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.2
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.3
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.4
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.5
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.6
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.7
-
cpe:2.3:a:rails_admin_project:rails_admin:0.6.8
-
cpe:2.3:a:rails_admin_project:rails_admin:0.7.0
-
cpe:2.3:a:rails_admin_project:rails_admin:0.8.0
-
cpe:2.3:a:rails_admin_project:rails_admin:0.8.1
-
cpe:2.3:a:rails_admin_project:rails_admin:1.0.0
-
cpe:2.3:a:rails_admin_project:rails_admin:1.1.0
-
cpe:2.3:a:rails_admin_project:rails_admin:1.1.1
-
cpe:2.3:a:rails_admin_project:rails_admin:1.2.0
-
cpe:2.3:a:rails_admin_project:rails_admin:1.3.0
-
cpe:2.3:a:rails_admin_project:rails_admin:1.4.0
-
cpe:2.3:a:rails_admin_project:rails_admin:1.4.1
-
cpe:2.3:a:rails_admin_project:rails_admin:1.4.2
-
cpe:2.3:a:rails_admin_project:rails_admin:2.0.0
-
cpe:2.3:a:rails_admin_project:rails_admin:2.0.1