Lucene search
Redhat.comRH:CVE-2022-23517HistoryDec 15, 2022 - 10:04 a.m.
CVE-2022-23517
2022-12-1510:04:46
redhat.com
access.redhat.com
19
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
An inefficient Regular Expression vulnerability was found in rubygem rails-html-sanitizer. Certain configurations are susceptible to excessive backtracking, leading to a denial of service through CPU resource consumption.
Related
osv
osv
Inefficient Regular Expression Complexity in rails-html-sanitizer
2022-12-13 17:43:02
CVE-2022-23517
2022-12-14 17:15:10
ruby-rails-html-sanitizer - security update
2023-09-13 00:00:00
github
github
Inefficient Regular Expression Complexity in rails-html-sanitizer
2022-12-13 17:43:02
prion
prion
Design/Logic Flaw
2022-12-14 17:15:00
cvelist
cvelist
cve
cve
CVE-2022-23517
2022-12-14 17:15:10
ubuntucve
ubuntucve
CVE-2022-23517
2022-12-14 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-12-15 02:04:21
debiancve
debiancve
CVE-2022-23517
2022-12-14 17:15:10
nvd
nvd
NVD:CVE-2022-23517
2022-12-14 17:15:10
hackerone
hackerone
Ruby on Rails: ReDoS (Rails::Html::PermitScrubber.scrub_attribute)
2022-08-30 02:48:16
openvas
openvas
openSUSE: Security Advisory for rubygem (SUSE-SU-2023:3714-1)
2024-03-04 00:00:00
Debian: Security Advisory (DLA-3566-1)
2023-09-14 00:00:00
debian
debian
[SECURITY] [DLA 3566-1] ruby-rails-html-sanitizer security update
2023-09-13 15:09:41
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : rubygem-rails-html-sanitizer (SUSE-SU-2023:3714-1)
2023-09-21 00:00:00
Debian DLA-3566-1 : ruby-rails-html-sanitizer - LTS security update
2023-09-14 00:00:00
Rocky Linux 8 : Satellite 6.13 Release (Important) (RLSA-2023:2097)
2023-05-05 00:00:00
rocky
rocky
Satellite 6.13 Release
2023-05-05 15:39:58
redhat
redhat
(RHSA-2023:2097) Important: Satellite 6.13 Release
2023-05-03 13:09:51
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Related for RH:CVE-2022-23517