A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foremanUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-multi_jsonUpgrade rubygem-little-pluggerUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-maintainUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-http-acceptUpgrade rubygem-ffiUpgrade rubygem-unicode-display_widthUpgrade rubygem-unfUpgrade rubygem-netrcUpgrade rubygem-hashieUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-unf_extUpgrade satellite-cloneUpgrade python39-pulp_manifestUpgrade rubygem-amazing_printUpgrade rubygem-rest-clientUpgrade rubygem-loggingUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-foreman_maintainUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-localeUpgrade rubygem-http-cookieUpgrade rubygem-highlineUpgrade rubygem-clampUpgrade rubygem-mime-types-dataUpgrade rubygem-ffi-debugsourceUpgrade rubygem-oauth-ttyUpgrade rubygem-snaky_hashUpgrade rubygem-domain_nameUpgrade rubygem-version_gemUpgrade rubygem-unicode-debugsourceUpgrade foreman-cliUpgrade rubygem-hammer_cli | May 4, 2023 | May 26, 2022 |
| Debian | — | Upgrade rails | Sep 6, 2022 | May 26, 2022 |
| Freebsd | — | Upgrade rubygem-actionview61Upgrade rubygem-actionpack61Upgrade rubygem-actionview52Upgrade rubygem-actionpack52Upgrade rubygem-actionview60Upgrade rubygem-actionview70Upgrade rubygem-actionpack70Upgrade rubygem-actionpack60 | Nov 4, 2022 | Apr 30, 2022 |
| Redhat_linux | — | Upgrade foreman-cliUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-clampUpgrade rubygem-oauthUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-highlineUpgrade rubygem-foreman_maintainUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cliUpgrade rubygem-http-cookieUpgrade rubygem-hashieUpgrade rubygem-version_gemUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unf_extUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-amazing_printUpgrade rubygem-domain_nameUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_tasksUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-multi_jsonUpgrade rubygem-unfUpgrade rubygem-http-acceptUpgrade satellite-maintainUpgrade rubygem-mime-typesUpgrade rubygem-netrcUpgrade rubygem-mime-types-dataUpgrade rubygem-jwtUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-gssapiUpgrade rubygem-unicode-display_widthUpgrade rubygem-ffi-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicodeUpgrade rubygem-snaky_hashUpgrade rubygem-little-pluggerUpgrade rubygem-oauth-ttyUpgrade satellite-cloneUpgrade rubygem-unicode-debuginfo | May 4, 2023 | May 26, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsource | Mar 12, 2024 | May 26, 2022 |
| Suse | — | Upgrade ruby2.5-rubygem-activesupport-doc-5_1Upgrade ruby2.5-rubygem-actionview-doc-5_1Upgrade ruby2.5-rubygem-activesupport-5_1Upgrade ruby2.5-rubygem-actionview-5_1 | Oct 26, 2022 | May 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub