ADVISORIES
GEM
SEVERITY
CVSS v3.x: 6.1 (Medium)
PATCHED VERSIONS
- >= 3.4.0
DESCRIPTION
Chartkick is vulnerable to CSS injection if user input is passed to the width or height option.
<%= line_chart data, width: params[:width], height: params[:height] %>
An attacker can set additional CSS properties, like:
<%= line_chart data, width: "100%; background-image: url('http://example.com/image.png')" %>