Lucene search
Ubuntu.comUB:CVE-2023-28362HistoryJul 17, 2023 - 12:00 a.m.
CVE-2023-28362
2023-07-1700:00:00
ubuntu.com
ubuntu.com
13
cve-2023-28362
unix
launchpad
[Unknown description]
Notes
| Author | Note |
|---|---|
| seth-arnold | In Oneiric-Saucy, rails package is just for transition; The rails package contains actual code from vivid onward |
References
discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441 (v6.1.7.4)
github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5 (main)
launchpad.net/bugs/cve/CVE-2023-28362
nvd.nist.gov/vuln/detail/CVE-2023-28362
security-tracker.debian.org/tracker/CVE-2023-28362
www.cve.org/CVERecord?id=CVE-2023-28362
Related
osv
osv
hackerone
hackerone
ibm
ibm
cve
cve
CVE-2023-28362
2023-07-14 16:32:27
debiancve
debiancve
CVE-2023-28362
2023-07-14 16:32:27
rubygems
rubygems
Possible XSS via User Supplied Values to redirect_to
2023-06-25 21:00:00
veracode
veracode
Cross-site Scripting (XSS)
2023-07-03 09:16:23
nessus
nessus
redhatcve
redhatcve
CVE-2023-28362
2023-07-13 16:35:45
openvas
openvas
openSUSE: Security Advisory for rubygem (SUSE-SU-2023:3229-1)
2024-03-04 00:00:00
github
github
redhat
redhat
(RHSA-2023:7851) Moderate: Satellite 6.14.1 Async Security Update
2023-12-14 16:20:36
Related for UB:CVE-2023-28362