A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hashieUpgrade rubygem-http-acceptUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade satellite-cliUpgrade rubygem-netrcUpgrade rubygem-multi_jsonUpgrade rubygem-little-pluggerUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicodeUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cliUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-version_gemUpgrade rubygem-unicode-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-snaky_hashUpgrade rubygem-oauth-ttyUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-gssapiUpgrade rubygem-domain_nameUpgrade rubygem-foreman_maintainUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-amazing_printUpgrade rubygem-localeUpgrade rubygem-http-cookieUpgrade rubygem-highlineUpgrade rubygem-clampUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_extUpgrade python39-pulp_manifestUpgrade rubygem-mime-types-dataUpgrade rubygem-ffi-debugsourceUpgrade foreman-cli | May 4, 2023 | May 26, 2022 |
| Debian | — | Upgrade rails | Sep 6, 2022 | May 26, 2022 |
| Freebsd | — | Upgrade rubygem-actionview52Upgrade rubygem-actionview61Upgrade rubygem-actionview70Upgrade rubygem-actionpack61Upgrade rubygem-actionpack52Upgrade rubygem-actionview60Upgrade rubygem-actionpack70Upgrade rubygem-actionpack60 | Nov 4, 2022 | Apr 30, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade rubygem-ffiUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-highlineUpgrade rubygem-domain_nameUpgrade rubygem-version_gemUpgrade rubygem-unf_extUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_tasksUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-amazing_printUpgrade foreman-cliUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-powerbarUpgrade satellite-cliUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-display_widthUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unfUpgrade rubygem-multi_jsonUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-netrcUpgrade rubygem-unicodeUpgrade rubygem-mime-types-dataUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-http-acceptUpgrade satellite-maintainUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-gssapi | May 4, 2023 | May 26, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-devel-debuginfo | Mar 12, 2024 | May 26, 2022 |
| Suse | — | Upgrade ruby2.5-rubygem-activesupport-5_1Upgrade ruby2.5-rubygem-actionview-5_1Upgrade ruby2.5-rubygem-activesupport-doc-5_1Upgrade ruby2.5-rubygem-actionview-doc-5_1 | Oct 26, 2022 | May 26, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub