Lucene search
Redhat.comRH:CVE-2023-28120HistoryMar 19, 2023 - 2:12 p.m.
CVE-2023-28120
2023-03-1914:12:56
redhat.com
access.redhat.com
19
A Cross-Site-Scripting vulnerability was found in rubygem ActiveSupport. If the new bytesplice method is called on a SafeBuffer with untrusted user input, malicious code could be executed.
Mitigation
Avoid calling bytesplice on a SafeBuffer (html_safe) string with untrusted user input.
Related
fedora
fedora
[SECURITY] Fedora 37 Update: rubygem-activejob-7.0.4.3-1.fc37
2023-04-05 01:36:45
[SECURITY] Fedora 37 Update: rubygem-rails-7.0.4.3-1.fc37
2023-04-05 01:36:46
[SECURITY] Fedora 37 Update: rubygem-actioncable-7.0.4.3-1.fc37
2023-04-05 01:36:45
openvas
openvas
Fedora: Security Advisory for rubygem-activemodel (FEDORA-2023-d6157bb1e2)
2023-04-02 00:00:00
Fedora: Security Advisory for rubygem-actionpack (FEDORA-2023-7002afbbb8)
2023-04-06 00:00:00
Fedora: Security Advisory for rubygem-actioncable (FEDORA-2023-7002afbbb8)
2023-04-06 00:00:00
github
github
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
2023-03-15 21:36:01
veracode
veracode
Cross-site Scripting (XSS)
2023-03-17 02:41:43
alpinelinux
alpinelinux
CVE-2023-28120
2023-03-15 02:20:21
nessus
nessus
Fedora 38 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2023-d6157bb1e2)
2023-04-02 00:00:00
Fedora 37 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2023-7002afbbb8)
2023-04-05 00:00:00
Debian DSA-5389-1 : rails - security update
2023-04-15 00:00:00
osv
osv
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
2023-03-15 21:36:01
rails - security update
2023-04-14 00:00:00
ubuntucve
ubuntucve
CVE-2023-28120
2023-03-22 00:00:00
debiancve
debiancve
CVE-2023-28120
2023-03-15 02:20:21
gitlab
gitlab
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
2023-03-15 00:00:00
cve
cve
CVE-2023-28120
2023-03-15 02:20:21
rubygems
rubygems
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
2023-03-12 21:00:00
debian
debian
[SECURITY] [DSA 5389-1] rails security update
2023-04-14 16:39:00
redhat
redhat
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-04-26 15:33:20
Related for RH:CVE-2023-28120