Lucene search

CVE-2022-23520

🗓️ 14 Dec 2022 00:00:00Reported by ubuntu.comType

rails-html-sanitizer XSS vulnerability fixed in version 1.4.

Reporter	Title	Published	Views	Family All 66
Hacker One	Internet Bug Bounty: CVE-2022-23520: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)	14 Dec 202221:17	–	hackerone
Hacker One	Ruby on Rails: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)	29 Jul 202221:46	–	hackerone
Hacker One	Internet Bug Bounty: Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag	14 Jun 202204:11	–	hackerone
Hacker One	Ruby on Rails: Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag	5 Apr 202207:34	–	hackerone
OSV	Possible XSS vulnerability with certain configurations of rails-html-sanitizer	13 Dec 202217:51	–	osv
OSV	CVE-2022-23520	14 Dec 202218:15	–	osv
OSV	CVE-2022-32209	24 Jun 202215:15	–	osv
OSV	ruby-rails-html-sanitizer - security update	7 Dec 202200:00	–	osv
OSV	Rails::Html::Sanitizer vulnerable to Cross-site Scripting	25 Jun 202200:00	–	osv
OSV	ruby-rails-html-sanitizer - security update	28 Sep 202400:00	–	osv

Source	Link
github	www.github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8
hackerone	www.hackerone.com/reports/1654310
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23520
launchpad	www.launchpad.net/bugs/cve/CVE-2022-23520
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-23520

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	ruby-rails-html-sanitizer	any	UNKNOWN
ubuntu	20.04	noarch	ruby-rails-html-sanitizer	any	UNKNOWN
ubuntu	22.04	noarch	ruby-rails-html-sanitizer	any	UNKNOWN
ubuntu	24.04	noarch	ruby-rails-html-sanitizer	any	UNKNOWN
ubuntu	16.04	noarch	ruby-rails-html-sanitizer	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Dec 2022 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS24.3

CVSS36.1

EPSS0.001