XSS Vulnerability in Action View tag helpers

🗓️ 27 Apr 2022 22:32:49Reported by GitHub Advisory DatabaseType

Possible XSS vulnerability in Action View tag helpers, assigned CVE-2022-2777

Reporter	Title	Published	Views	Family All 65
FreeBSD	Rails -- XSS vulnerabilities	26 Apr 202200:00	–	freebsd
ATTACKERKB	CVE-2022-27777	26 May 202217:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в rails	20 May 202605:53	–	astralinux
Circl	CVE-2022-27777	26 May 202220:14	–	circl
CNNVD	Action View tag helpers 跨站脚本漏洞	26 May 202200:00	–	cnnvd
CVE	CVE-2022-27777	26 May 202200:00	–	cve
Cvelist	CVE-2022-27777	26 May 202200:00	–	cvelist
Debian	[SECURITY] [DLA 3093-1] rails security update	3 Sep 202211:34	–	debian
Debian	[SECURITY] [DSA 5372-1] rails security update	13 Mar 202303:06	–	debian
Debian CVE	CVE-2022-27777	26 May 202200:00	–	debiancve

Vulners

Node

rubyonrails actionviewRange7.0.0–7.0.2.3rubygems

rubyonrails actionviewRange6.1.0–6.1.5.0rubygems

rubyonrails actionviewRange6.0.0–6.0.4.7rubygems

rubyonrails actionviewRange≤5.2.7.0rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-27777
github	www.github.com/rails/rails/commit/649516ce0feb699ae06a8c5e81df75d460cc9a85
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2022-27777.yml
groups	www.groups.google.com/g/ruby-security-ann/c/9wJPEDv-iRw
rubyonrails	www.rubyonrails.org/2022/4/26/Rails-7-0-2-4-6-1-5-1-6-0-4-8-and-5-2-7-1-have-been-released
discuss	www.discuss.rubyonrails.org/t/cve-2022-27777-possible-xss-vulnerability-in-action-view-tag-helpers/80534
lists	www.lists.debian.org/debian-lts-announce/2022/09/msg00002.html
debian	www.debian.org/security/2023/dsa-5372
github	www.github.com/advisories/GHSA-ch3h-j2vf-95pv

07 Jun 2023 15:35Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 3.16.1

EPSS0.01409