Lucene search
Veracode Vulnerability DatabaseVERACODE:41112HistoryJul 03, 2023 - 9:16 a.m.
Cross-site Scripting (XSS)
2023-07-0309:16:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
actionpack
xss
redirect_to
vulnerability
url
illegal characters
rfc compliance
http response headers
cross-site scripting attacks
redirecting.rb
downstream services
actionpack is vulnerable to Cross-site Scripting (XSS). The vulnerability exists because the redirect_to functio of redirecting.rb does not properly check the provided URL for illegal characters, resulting in the downstream services which enforce RFC compliance on HTTP response headers to remove the assigned location header, possibly resulting in cross-site scripting attacks.
Related
ubuntucve
ubuntucve
CVE-2023-28362
2023-07-17 00:00:00
osv
osv
hackerone
hackerone
cve
cve
CVE-2023-28362
2023-07-14 16:32:27
ibm
ibm
debiancve
debiancve
CVE-2023-28362
2023-07-14 16:32:27
rubygems
rubygems
Possible XSS via User Supplied Values to redirect_to
2023-06-25 21:00:00
nessus
nessus
redhatcve
redhatcve
CVE-2023-28362
2023-07-13 16:35:45
openvas
openvas
openSUSE: Security Advisory for rubygem (SUSE-SU-2023:3229-1)
2024-03-04 00:00:00
github
github
redhat
redhat
(RHSA-2023:7851) Moderate: Satellite 6.14.1 Async Security Update
2023-12-14 16:20:36
Related for VERACODE:41112