← All advisories

Moderate severityNVD Advisory· Published Aug 20, 2019· Updated Aug 5, 2024

CVE-2018-20975

CVE-2018-20975

Description

Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
fat_free_crmRubyGems	< 0.18.1	0.18.1

Affected products

2

Fat Free CRM/Fat Free CRMdescription
ghsa-coords
pkg:gem/fat_free_crm
Range: < 0.18.1

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-4p8f-mmfj-r45gghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20975ghsaADVISORY
github.com/fatfreecrm/fat_free_crm/commit/6d60bc8ed010c4eda05d6645c64849f415f68d65ghsax_refsource_CONFIRMWEB
github.com/fatfreecrm/fat_free_crm/compare/v0.17.3...v0.18.1ghsax_refsource_CONFIRMWEB
github.com/fatfreecrm/fat_free_crm/releases/tag/v0.18.1ghsax_refsource_CONFIRMWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/fat_free_crm/CVE-2018-20975.ymlghsaWEB

News mentions

0

No linked articles in our index yet.