PT-2022-7454

🗓️ 13 Dec 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Rails-html-sanitizer allows cross-site scripting attacks; upgrade to version 1.4.4 or later recommended.

Reporter	Title	Published	Views	Family All 273
AstraLinux	Astra Linux – Vulnerability in ruby-rails-html-sanitizer	3 May 202623:59	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ruby-rails-html-sanitizer	3 May 202623:59	–	astralinux
AstraLinux	Astra Linux - уязвимость в ruby-rails-html-sanitizer	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в ruby-rails-html-sanitizer	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в ruby-rails-html-sanitizer	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications allows attackers to perform cross-site scripting attacks.	30 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications stems from improper handling of input data during web page generation. This allows attackers to perform cross-site scripting attacks.	27 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications stems from improper handling of input data during web page generation. This allows attackers to perform cross-site scripting attacks.	27 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications stems from the inefficient complexity of regular expressions. This allows attackers to trigger a service failure.	27 Aug 202400:00	–	bdu_fstec
Circl	CVE-2015-7578	29 Mar 201915:45	–	circl

Source	Link
github	www.github.com/rails/rails-html-sanitizer/commit/d1223a29cb3e4151cdcb6ba6c8431708d8ce40a6
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2022-23518
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rails-html-sanitizer/CVE-2022-23518.yml
suse	www.suse.com/security/cve/CVE-2022-23518
t	www.t.me/cibsecurity/54540
osv	www.osv.dev/vulnerability/CVE-2022-23518
github	www.github.com/rails/rails-html-sanitizer/issues/135
hackerone	www.hackerone.com/reports/1694173
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.9
github	www.github.com/w3c/svgwg/issues/266

13 Mar 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3 - 6.4

CVSS 36.1

CVSS 3.17.5

EPSS0.2914

SSVC