Lucene search

Possible XSS vulnerability with certain configurations of rails-html-sanitizer

🗓️ 13 Dec 2022 17:25:50Reported by GitHub Advisory DatabaseType

Possible XSS vulnerability in Rails::Html::Sanitize

Reporter	Title	Published	Views	Family All 32
UbuntuCve	CVE-2022-23519	14 Dec 202200:00	–	ubuntucve
NVD	CVE-2022-23519	14 Dec 202217:15	–	nvd
OSV	Possible XSS vulnerability with certain configurations of rails-html-sanitizer	13 Dec 202217:50	–	osv
OSV	CVE-2022-23519	14 Dec 202217:15	–	osv
OSV	ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	ruby-rails-html-sanitizer - security update	13 Sep 202300:00	–	osv
OSV	ruby-rails-html-sanitizer - security update	28 Sep 202400:00	–	osv
OSV	ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 on GA media	12 Jul 202400:00	–	osv
OSV	Red Hat Security Advisory: Satellite 6.13 Release	30 Sep 202416:32	–	osv
Hacker One	Internet Bug Bounty: CVE-2022-23519: Rails::Html::SafeListSanitizer vulnerable to XSS when certain tags are allowed (math+style \|\| svg+style)	14 Dec 202221:22	–	hackerone

Vulners

Node

typo3 html_sanitizerRange<1.4.4

Source	Link
github	www.github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h
hackerone	www.hackerone.com/reports/1656627
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rails-html-sanitizer/CVE-2022-23519.yml
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23519
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00012.html
github	www.github.com/advisories/GHSA-9h9g-93gc-623h

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2022 17:50Current

6.5Medium risk

Vulners AI Score6.5

EPSS0.001

CWE-79