A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-http-acceptUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-multi_jsonUpgrade satellite-cliUpgrade rubygem-unicodeUpgrade rubygem-hashieUpgrade rubygem-unicode-display_widthUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-ffiUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-snaky_hashUpgrade rubygem-version_gemUpgrade rubygem-unicode-debugsourceUpgrade rubygem-fast_gettextUpgrade python39-pulp_manifestUpgrade foreman-cliUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-oauth-ttyUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-gssapiUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade rubygem-ffi-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-highlineUpgrade rubygem-clampUpgrade rubygem-localeUpgrade rubygem-mime-types-dataUpgrade rubygem-apipie-bindingsUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_bootdisk | May 4, 2023 | May 26, 2022 |
| Debian | — | Upgrade rails | Sep 6, 2022 | May 26, 2022 |
| Freebsd | — | Upgrade rubygem-actionpack52Upgrade rubygem-actionview60Upgrade rubygem-actionpack61Upgrade rubygem-actionview70Upgrade rubygem-actionview61Upgrade rubygem-actionview52Upgrade rubygem-actionpack60Upgrade rubygem-actionpack70 | Nov 4, 2022 | Apr 30, 2022 |
| Redhat_linux | — | Upgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade rubygem-unf_extUpgrade rubygem-localeUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-foreman_maintainUpgrade rubygem-highlineUpgrade satellite-cliUpgrade rubygem-amazing_printUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cliUpgrade rubygem-rest-clientUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_adminUpgrade python39-pulp_manifestUpgrade rubygem-hashieUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-version_gemUpgrade rubygem-ffiUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-little-pluggerUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicodeUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-cloneUpgrade rubygem-http-acceptUpgrade rubygem-unicode-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-ffi-debugsourceUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-snaky_hashUpgrade rubygem-netrcUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-multi_jsonUpgrade rubygem-oauth-ttyUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-types-data | May 4, 2023 | May 26, 2022 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | May 26, 2022 |
| Suse | — | Upgrade ruby2.5-rubygem-actionview-doc-5_1Upgrade ruby2.5-rubygem-activesupport-5_1Upgrade ruby2.5-rubygem-actionview-5_1Upgrade ruby2.5-rubygem-activesupport-doc-5_1 | Oct 26, 2022 | May 26, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub