CVE:CVE-2020-11082
CNNVD:CNNVD-202005-1393
Kaminari是一款基于范围的分页器。
Kaminari 1.2.1之前版本中存在跨站脚本漏洞。攻击者可借助分页链接利用该漏洞注入任意代码。
solution:Upgrade kaminari_project kaminari to a higher version than 1.2.1,and avoid the version (,1.2.1); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0