Lucene search
+L

27 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•15 views

Astra Linux – Vulnerability in Rails

An XSS vulnerability exists in the Action View tag helpers versions 5.2.0 and below, which would allow an attacker to inject content if they can control the input into specific attributes...

6.1CVSS6AI score0.01639EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/23 11:17 p.m.•23 views

DEBIAN-CVE-2026-33168

Action View provides conventions and helpers for building web pages with the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed, producing malformed HTML. A carefull...

2.3CVSS6AI score0.00879EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/23 11:01 p.m.•44 views

CVE-2026-33168 Rails has a possible XSS vulnerability in its Action View tag helpers

Action View provides conventions and helpers for building web pages with the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed, producing malformed HTML. A carefull...

2.3CVSS0.00879EPSS
SaveExploits0References7
CVE
CVE
•added 2026/03/23 11:01 p.m.•57 views

CVE-2026-33168

CVE-2026-33168 (Rails / Action View) affects Rails’ Action View tag helpers. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, using a blank string as an HTML attribute name bypasses attribute escaping, producing malformed HTML. A crafted attribute could be misinterpreted by the browser as a new a...

2.3CVSS6AI score0.00879EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2026/03/23 8:51 p.m.•24 views

Rails has a possible XSS vulnerability in its Action View tag helpers

Impact When a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed, producing malformed HTML. A carefully crafted attribute value could then be misinterpreted by the browser as a separate attribute name, possibly leading to XSS. Application...

2.3CVSS6AI score0.00879EPSS
SaveExploits0References10Affected Software1
EUVD
EUVD
•added 2026/03/23 8:51 p.m.•16 views

EUVD-2026-14616

Rails has a possible XSS vulnerability in its Action View tag helpers...

2.3CVSS5.8AI score0.00879EPSS
SaveExploits0References7
OSV
OSV
•added 2026/03/23 8:51 p.m.•21 views

GHSA-V55J-83PF-R9CQ Rails has a possible XSS vulnerability in its Action View tag helpers

Impact When a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed, producing malformed HTML. A carefully crafted attribute value could then be misinterpreted by the browser as a separate attribute name, possibly leading to XSS. Application...

2.3CVSS5.8AI score0.00879EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-1707

Malicious code in bioql PyPI...

6.1CVSS6AI score0.01639EPSS
SaveExploits1References10
SUSE CVE
SUSE CVE
•added 2023/02/15 3:26 a.m.•8 views

SUSE CVE-2022-27777

A XSS Vulnerability in Action View tag helpers = 5.2.0 and 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes...

6.5CVSS6.3AI score0.01639EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2022/05/26 5:15 p.m.•10 views

CVE-2022-27777

A XSS Vulnerability in Action View tag helpers = 5.2.0 and 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes...

6.1CVSS5.9AI score0.01639EPSS
SaveExploits1References4
OSV
OSV
•added 2022/05/26 5:15 p.m.•5 views

DEBIAN-CVE-2022-27777

A XSS Vulnerability in Action View tag helpers = 5.2.0 and 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes...

6.1CVSS6AI score0.01639EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/26 5:15 p.m.•30 views

CVE-2022-27777

A XSS Vulnerability in Action View tag helpers = 5.2.0 and 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes...

6.1CVSS0.01639EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/05/26 5:15 p.m.•53 views

CVE-2022-27777

A XSS Vulnerability in Action View tag helpers = 5.2.0 and 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes...

6.1CVSS6.6AI score0.01639EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•15 views

Action View tag helpers 跨站脚本漏洞

Action View tag helpers is an open source, free, easy-to-use, Jira-like issue requirement tracking tool for small and medium-sized businesses from Action View. A security vulnerability exists in Action View tag helpers version 5.2.0 and later versions. An attacker can exploit the vulnerability to...

6.1CVSS7.2AI score0.01639EPSS
SaveExploits1References7
CVE
CVE
•added 2022/05/26 12:00 a.m.•268 views

CVE-2022-27777

CVE-2022-27777 : Rails contains an XSS vulnerability in Action View tag helpers that could allow an attacker to inject content when they can control input in specific attributes. The issue is confirmed across multiple sources (Rails ecosystem advisories and debian/security notes) and is tied to t...

6.1CVSS5.8AI score0.01639EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/26 12:00 a.m.•4 views

CVE-2022-27777: Improper Neutralization of Input During Web Page Generation

A XSS Vulnerability in Action View tag helpers = 5.2.0 and 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes...

6.1CVSS6.1AI score0.01639EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/04/27 10:32 p.m.•45 views

XSS Vulnerability in Action View tag helpers

There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted input as hash keys can lead to a possible XSS vulnerability. This vulnerability has been assigned the CVE identifier CVE-2022-27777. Versions Affected: ALL Not affected: NONE Fixed Versions: 7.0.2.4, 6.1.5.1,...

6.1CVSS6.4AI score0.01639EPSS
SaveExploits1References9Affected Software1
OSV
OSV
•added 2022/04/27 10:32 p.m.•49 views

GHSA-CH3H-J2VF-95PV XSS Vulnerability in Action View tag helpers

There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted input as hash keys can lead to a possible XSS vulnerability. This vulnerability has been assigned the CVE identifier CVE-2022-27777. Versions Affected: ALL Not affected: NONE Fixed Versions: 7.0.2.4, 6.1.5.1,...

6.1CVSS6.2AI score0.01639EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2022/04/27 12:00 a.m.•14 views

PT-2022-3569

Name of the Vulnerable Software and Affected Versions Action View tag helpers versions prior to 5.2.7.1 Action View tag helpers versions prior to 6.0.4.8 Action View tag helpers versions prior to 6.1.5.1 Action View tag helpers versions prior to 7.0.2.4 Description A XSS vulnerability exists in...

6.4CVSS6.9AI score0.01639EPSS
SaveExploits1References35
RubySec
RubySec
•added 2022/04/26 12:00 a.m.•41 views

Possible XSS Vulnerability in Action View tag helpers

There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted input as hash keys can lead to a possible XSS vulnerability. This vulnerability has been assigned the CVE identifier CVE-2022-27777. Versions Affected: ALL Not affected: NONE Fixed Versions: 7.0.2.4, 6.1.5.1,...

6.1CVSS3.2AI score0.01639EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder