CVE:CVE-2020-25739
CNNVD:CNNVD-202009-1360
Ruby是松本行弘软件开发者的一种跨平台、面向对象的动态类型编程语言。
Ruby gon 6.4.0之前版本存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade gon_project gon to a higher version than 6.4.0,and avoid the version (,6.4.0); Upgrade canonical ubuntu_linux to a higher version than 18.04,and avoid the version 18.04; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0