Lucene search

CVE-2022-23517

🗓️ 14 Dec 2022 17:10:15Reported by [email protected]Type

rails-html-sanitizer vulnerability patched in version 1.4.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 35
Cvelist	CVE-2022-23517 Inefficient Regular Expression Complexity in rails-html-sanitizer	14 Dec 202216:10	–	cvelist
Prion	Design/Logic Flaw	14 Dec 202217:15	–	prion
CVE	CVE-2022-23517	14 Dec 202217:15	–	cve
Vulnrichment	CVE-2022-23517 Inefficient Regular Expression Complexity in rails-html-sanitizer	14 Dec 202216:10	–	vulnrichment
OSV	GHSA-5X79-W82F-GW8W Inefficient Regular Expression Complexity in rails-html-sanitizer	13 Dec 202217:43	–	osv
OSV	CVE-2022-23517	14 Dec 202217:15	–	osv
OSV	UBUNTU-CVE-2022-23517	14 Dec 202217:15	–	osv
OSV	SUSE-SU-2023:3534-1 Security update for rubygem-rails-html-sanitizer	5 Sep 202312:39	–	osv
OSV	SUSE-SU-2023:3714-1 Security update for rubygem-rails-html-sanitizer	20 Sep 202318:06	–	osv
OSV	OPENSUSE-SU-2024:12769-1 ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 on GA media	15 Jun 202400:00	–	osv

Nvd

Node

rubyonrails rails_html_sanitizersRange<1.4.4rails

Node

debian debian_linuxMatch10.0

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00012.html
hackerone	www.hackerone.com/reports/1684163
github	www.github.com/rails/rails-html-sanitizer/security/advisories/GHSA-5x79-w82f-gw8w
github	www.github.com/rails/rails-html-sanitizer/commit/56c61c0cebd1e493e8ad7bca2a0191609a4a6979

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Dec 2022 17:15Current

CVSS37.5

EPSS0.00204

CWE-1333