CVE-2019-12732

The Chartkick gem through 3.1.0 for Ruby allows XSS.

• CWE-79

• https://github.com/ankane/chartkick/blob/master/CHANGELOG.mdRelease Notes, Vendor Advisory
• https://github.com/ankane/chartkick/issues/488Exploit, Issue Tracking, Third Party Advisory
• https://github.com/ankane/chartkick/blob/master/CHANGELOG.mdRelease Notes, Vendor Advisory
• https://github.com/ankane/chartkick/issues/488Exploit, Issue Tracking, Third Party Advisory

Published

Jun 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12725Zeroshell 3.9.0 is prone to a remote command execution vulne…
• CVE-2019-12727On Ubiquiti airCam 3.1.4 devices, a Denial of Service vulner…
• CVE-2019-12728Grails before 3.3.10 used cleartext HTTP to resolve the SDKM…8.1
• CVE-2019-1273A cross-site-scripting (XSS) vulnerability exists when Activ…5.4
• CVE-2019-12730aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.1…
• CVE-2019-12731The Windows versions of Snapview Mikogo, versions before 5.1…
• CVE-2019-12733SiteVision 4 allows Remote Code Execution.8.8
• CVE-2019-12734SiteVision 4 has Incorrect Access Control.8.8
• CVE-2019-12735getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 all…
• CVE-2019-12736JetBrains Ktor framework before 1.2.0-rc does not sanitize t…9.8
• CVE-2019-12737UserHashedTableAuth in JetBrains Ktor framework before 1.2.0…5.3
• CVE-2019-12739lib/Controller/ExtractionController.php in the Extract add-o…9