CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-26143

Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like translate, or t on a controller, with a key ending in "_html", a :default key which contains untrusted user input, and the resulting string is used in a view, may be susceptible to an XSS vulnerability. The vulnerability is fixed in 7.1.3.1 and 7.0.8.1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 78.7%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2024-26143

Rubyonrails » Rails » Version: 7.0.0

cpe:2.3:a:rubyonrails:rails:7.0.0
Rubyonrails » Rails » Version: 7.0.1

cpe:2.3:a:rubyonrails:rails:7.0.1
Rubyonrails » Rails » Version: 7.0.2.2

cpe:2.3:a:rubyonrails:rails:7.0.2.2
Rubyonrails » Rails » Version: 7.0.4.1

cpe:2.3:a:rubyonrails:rails:7.0.4.1
Rubyonrails » Rails » Version: 7.0.4.2

cpe:2.3:a:rubyonrails:rails:7.0.4.2
Rubyonrails » Rails » Version: 7.0.4.3

cpe:2.3:a:rubyonrails:rails:7.0.4.3
Rubyonrails » Rails » Version: 7.0.5

cpe:2.3:a:rubyonrails:rails:7.0.5
Rubyonrails » Rails » Version: 7.0.5.1

cpe:2.3:a:rubyonrails:rails:7.0.5.1
Rubyonrails » Rails » Version: 7.0.6

cpe:2.3:a:rubyonrails:rails:7.0.6
Rubyonrails » Rails » Version: 7.0.7

cpe:2.3:a:rubyonrails:rails:7.0.7
Rubyonrails » Rails » Version: 7.0.7.1

cpe:2.3:a:rubyonrails:rails:7.0.7.1
Rubyonrails » Rails » Version: 7.0.7.2

cpe:2.3:a:rubyonrails:rails:7.0.7.2
Rubyonrails » Rails » Version: 7.0.8

cpe:2.3:a:rubyonrails:rails:7.0.8
Rubyonrails » Rails » Version: 7.1.0

cpe:2.3:a:rubyonrails:rails:7.1.0
Rubyonrails » Rails » Version: 7.1.1

cpe:2.3:a:rubyonrails:rails:7.1.1
Rubyonrails » Rails » Version: 7.1.2

cpe:2.3:a:rubyonrails:rails:7.1.2
Rubyonrails » Rails » Version: 7.1.3

cpe:2.3:a:rubyonrails:rails:7.1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-26143

Products

Pricing

Contact Us