Lucene search

Possible XSS vulnerability with certain configurations of rails-html-sanitizer

🗓️ 13 Dec 2022 17:25:50Reported by GoogleType

osv🔗 osv.dev👁 23 Views

Possible XSS vulnerability in Rails::Html::Sanitize

Reporter	Title	Published	Views	Family All 33
NVD	CVE-2022-23519	14 Dec 202217:15	–	nvd
UbuntuCve	CVE-2022-23519	14 Dec 202200:00	–	ubuntucve
Github Security Blog	Possible XSS vulnerability with certain configurations of rails-html-sanitizer	13 Dec 202217:50	–	github
Hacker One	Internet Bug Bounty: CVE-2022-23519: Rails::Html::SafeListSanitizer vulnerable to XSS when certain tags are allowed (math+style \|\| svg+style)	14 Dec 202221:22	–	hackerone
Hacker One	Ruby on Rails: Rails::Html::SafeListSanitizer vulnerable to XSS when certain tags are allowed (math+style \|\| svg+style)	1 Aug 202221:28	–	hackerone
Cvelist	CVE-2022-23519 Possible XSS vulnerability with certain configurations of rails-html-sanitizer	14 Dec 202216:50	–	cvelist
CVE	CVE-2022-23519	14 Dec 202217:15	–	cve
OSV	CVE-2022-23519	14 Dec 202217:15	–	osv
OSV	ruby-rails-html-sanitizer - security update	13 Sep 202300:00	–	osv
OSV	ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 on GA media	15 Jun 202400:00	–	osv

Source	Link
github	www.github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23519
hackerone	www.hackerone.com/reports/1656627
github	www.github.com/rails/rails-html-sanitizer
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rails-html-sanitizer/CVE-2022-23519.yml
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00012.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2022 17:50Current

6.5Medium risk

Vulners AI Score6.5

CVSS36.1

EPSS0.001