EUVD-2022-1707

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

XSS vulnerability in Action View tag helpers versions 5.2.0 allowing content injection via controlled input.

Reporter	Title	Published	Views	Family All 65
FreeBSD	Rails -- XSS vulnerabilities	26 Apr 202200:00	–	freebsd
ATTACKERKB	CVE-2022-27777	26 May 202217:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в rails	3 May 202623:59	–	astralinux
Circl	CVE-2022-27777	26 May 202220:14	–	circl
CNNVD	Action View tag helpers 跨站脚本漏洞	26 May 202200:00	–	cnnvd
CVE	CVE-2022-27777	26 May 202200:00	–	cve
Cvelist	CVE-2022-27777	26 May 202200:00	–	cvelist
Debian	[SECURITY] [DLA 3093-1] rails security update	3 Sep 202211:34	–	debian
Debian	[SECURITY] [DSA 5372-1] rails security update	13 Mar 202303:06	–	debian
Debian CVE	CVE-2022-27777	26 May 202200:00	–	debiancve

[
  {
    "enisaIdVendor": [
      {
        "id": "22e7aabb-9fb2-37d8-a142-42728311f0a6",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-27777
github	www.github.com/rails/rails/commit/649516ce0feb699ae06a8c5e81df75d460cc9a85
discuss	www.discuss.rubyonrails.org/t/cve-2022-27777-possible-xss-vulnerability-in-action-view-tag-helpers/80534
github	www.github.com/rails/rails
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2022-27777.yml
groups	www.groups.google.com/g/ruby-security-ann/c/9wJPEDv-iRw
lists	www.lists.debian.org/debian-lts-announce/2022/09/msg00002.html
rubyonrails	www.rubyonrails.org/2022/4/26/Rails-7-0-2-4-6-1-5-1-6-0-4-8-and-5-2-7-1-have-been-released
debian	www.debian.org/security/2023/dsa-5372
suse	www.suse.com/security/cve/CVE-2022-27777.html

03 Oct 2025 20:07Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

CVSS 24.3

EPSS0.01409