Lucene search

CVE-2022-23518

🗓️ 15 Dec 2022 10:06:00Reported by redhat.comType

Rails-html-sanitizer XSS vulnerability with data URI neutralization issue

Reporter	Title	Published	Views	Family All 31
Prion	Cross site scripting	14 Dec 202217:15	–	prion
Cvelist	CVE-2022-23518 Improper neutralization of data URIs allows XSS in rails-html-sanitizer	14 Dec 202216:22	–	cvelist
Debian CVE	CVE-2022-23518	14 Dec 202217:15	–	debiancve
NVD	CVE-2022-23518	14 Dec 202217:15	–	nvd
Veracode	Cross-site Scripting (XSS)	14 Dec 202213:27	–	veracode
CVE	CVE-2022-23518	14 Dec 202217:15	–	cve
OSV	Improper neutralization of data URIs may allow XSS in rails-html-sanitizer	13 Dec 202217:45	–	osv
OSV	CVE-2022-23518	14 Dec 202217:15	–	osv
OSV	ruby-rails-html-sanitizer - security update	13 Sep 202300:00	–	osv
OSV	ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 on GA media	15 Jun 202400:00	–	osv

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23518
github	www.github.com/rails/rails-html-sanitizer/issues/135
github	www.github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Dec 2022 10:00Current

3.0Low risk

Vulners AI Score3.0

CVSS36.1

EPSS0.001