Lucene search
K

Ruby on Rails: Incorrect handling of certain characters passed to the redirection functionality in Rails can lead to a single-click XSS vulnerability.

🗓️ 20 Apr 2023 01:32:01Reported by meowdayType 
hackerone
 hackerone
🔗 hackerone.com👁 30 Views

Incorrect handling of characters in Rails redirection can lead to single-click XSS vulnerabilit

Related
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for CVE-2017-17562
5 Feb 201605:24
githubexploit
GithubExploit
Exploit for CVE-2017-17562
5 Feb 201605:24
githubexploit
IBM Security Bulletins
Security Bulletin: A vulnerability in Ruby on Rails affects IBM License Metric Tool v9 (CVE-2023-28362) and could allow cross-site scripting.
22 Sep 202308:32
ibm
Circl
CVE-2023-28362
9 Jan 202501:11
circl
CNNVD
Rails Security Vulnerabilities
10 Aug 202300:00
cnnvd
CVE
CVE-2023-28362
9 Jan 202500:33
cve
Cvelist
CVE-2023-28362
9 Jan 202500:33
cvelist
Debian
[SECURITY] [DLA 4383-1] rails security update
25 Nov 202519:57
debian
Debian
[SECURITY] [DSA 5881-1] rails security update
17 Mar 202519:41
debian
Debian CVE
CVE-2023-28362
9 Jan 202500:33
debiancve
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Jul 2023 00:27Current
4Medium risk
Vulners AI Score4
CVSS 3.14
EPSS0.00207
SSVC
30