← All advisories

High severity7.7NVD Advisory· Published Feb 13, 2020· Updated Jun 17, 2026

CVE-2020-5241

CVE-2020-5241

Description

matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
matestack-ui-coreRubyGems	< 0.7.4	0.7.4

Affected products

3

matestack/UI Core
cpe:2.3:a:matestack:ui-core:*:*:*:*:*:ruby:*:*
Range: <0.7.4
ghsa-coords
pkg:gem/matestack-ui-core
Range: < 0.7.4
matestack/matestack-ui-corecpe-rescue
Range: < 0.7.4

Patches

Vulnerability mechanics

References

6

github.com/matestack/matestack-ui-core/security/advisories/GHSA-3jqw-vv45-mjhhnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-3jqw-vv45-mjhhghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-5241ghsaADVISORY
github.com/matestack/matestack-ui-core/commit/5c61571739e860db9ca578fe09ab4733878cb0fcghsaWEB
github.com/matestack/matestack-ui-core/commit/e96915cf20c4fa0571df7fa21e9b09a69be19107ghsaWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/matestack-ui-core/CVE-2020-5241.ymlghsaWEB

News mentions

0

No linked articles in our index yet.