Lucene search
Internet Bug Bounty: CVE-2022-23519: Rails::Html::SafeListSanitizer vulnerable to XSS when certain tags are allowed (math+style || svg+style)
Rails HTML Sanitizer allows certain combinations of tags in its allow list to allow XSS, such as svg+style and math+style. A sample vulnerable Rails application is provided for testing this vulnerability
Show more
| Reporter | Title | Published | Views | Family All 32 |
|---|---|---|---|---|
 | CVE-2022-23519 | 14 Dec 202217:15 | – | nvd |
 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 13 Dec 202217:50 | – | github |
 | CVE-2022-23519 | 14 Dec 202200:00 | – | ubuntucve |
 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 13 Dec 202217:50 | – | osv |
| CVE-2022-23519 | 14 Dec 202217:15 | – | osv |
| ruby-rails-html-sanitizer - security update | 13 Sep 202300:00 | – | osv |
| ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 on GA media | 15 Jun 202400:00 | – | osv |
| ruby-rails-html-sanitizer - security update | 28 Sep 202400:00 | – | osv |
| ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 on GA media | 12 Jul 202400:00 | – | osv |
| Red Hat Security Advisory: Satellite 6.13 Release | 30 Sep 202416:32 | – | osv |
10
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 Dec 2022 21:22Current
6.3Medium risk
Vulners AI Score6.3
EPSS0.001