CVE-2022-27777
published 2022-05-26CVE-2022-27777: A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific…
PriorityP426medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
1.49%
71.1th percentile
A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | rails | < rails 2:6.1.6.1+dfsg-1 (bookworm) | rails 2:6.1.6.1+dfsg-1 (bookworm) |
| https | github.com_rails_rails | — | — |
| rails | actionview | >= 0 < 5.2.7.1 | 5.2.7.1 |
| rails | actionview | >= 6.0.0 < 6.0.4.8 | 6.0.4.8 |
| rails | actionview | >= 6.1.0 < 6.1.5.1 | 6.1.5.1 |
| rails | actionview | >= 7.0.0 < 7.0.2.4 | 7.0.2.4 |
| rubyonrails | actionpack | < 5.2.7.1 | 5.2.7.1 |
| rubyonrails | actionpack | >= 6.0.0 < 6.0.4.8 | 6.0.4.8 |
| rubyonrails | actionpack | >= 6.1.0 < 6.1.5.1 | 6.1.5.1 |
| rubyonrails | actionpack | >= 7.0.0 < 7.0.2.4 | 7.0.2.4 |
| rubyonrails | rails | >= 0 < 2:6.0.3.7+dfsg-2+deb11u1 | 2:6.0.3.7+dfsg-2+deb11u1 |
| rubyonrails | rails | >= 0 < 2:6.1.6.1+dfsg-1 | 2:6.1.6.1+dfsg-1 |
| rubyonrails | rails | >= 0 < 2:6.1.6.1+dfsg-1 | 2:6.1.6.1+dfsg-1 |
| rubyonrails | rails | >= 0 < 2:6.1.6.1+dfsg-1 | 2:6.1.6.1+dfsg-1 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
ghsa6.1MEDIUM
osv6.1MEDIUM
vendor_debian6.1MEDIUM
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-27777: A XSS Vulnerability in Action View tag helpers >= 5
osv·2022-05-26·CVSS 6.1
CVE-2022-27777 [MEDIUM] CVE-2022-27777: A XSS Vulnerability in Action View tag helpers >= 5
A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.
GHSA
XSS Vulnerability in Action View tag helpers
ghsa·2022-04-27·CVSS 6.1
CVE-2022-27777 [MEDIUM] CWE-79 XSS Vulnerability in Action View tag helpers
XSS Vulnerability in Action View tag helpers
There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted input as hash keys can lead to a possible XSS vulnerability. This vulnerability has been assigned the CVE identifier CVE-2022-27777.
Versions Affected: ALL
Not affected: NONE
Fixed Versions: 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1
## Impact
If untrusted data is passed as the hash key for tag attributes, there is a possibility that the untrusted data may not be properly escaped which can lead to an XSS vulnerability.
Impacted code will look something like this:
```
check_box_tag('thename', 'thevalue', false, aria: { malicious_input => 'thevalueofaria' })
```
Where the "malicious_input" variable contains untrusted data.
All users running an affected release shou
OSV
XSS Vulnerability in Action View tag helpers
osv·2022-04-27·CVSS 6.1
CVE-2022-27777 [MEDIUM] XSS Vulnerability in Action View tag helpers
XSS Vulnerability in Action View tag helpers
There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted input as hash keys can lead to a possible XSS vulnerability. This vulnerability has been assigned the CVE identifier CVE-2022-27777.
Versions Affected: ALL
Not affected: NONE
Fixed Versions: 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1
## Impact
If untrusted data is passed as the hash key for tag attributes, there is a possibility that the untrusted data may not be properly escaped which can lead to an XSS vulnerability.
Impacted code will look something like this:
```
check_box_tag('thename', 'thevalue', false, aria: { malicious_input => 'thevalueofaria' })
```
Where the "malicious_input" variable contains untrusted data.
All users running an affected release shou
Red Hat
tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers
vendor_redhat·2022-04-27·CVSS 6.1
CVE-2022-27777 [MEDIUM] CWE-79 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers
tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers
A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.
A flaw was found in rubygem-actionview when untrusted data such as the hash key for tag attributes are not properly escaped. This flaw allows an attacker to perform a Cross-site scripting attack.
Package: actionview (CloudForms Management Engine 5) - Out of support scope
Package: actionview (Red Hat 3scale API Management Platform 2) - Will not fix
Debian
CVE-2022-27777: rails - A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would ...
vendor_debian·2022·CVSS 6.1
CVE-2022-27777 [MEDIUM] CVE-2022-27777: rails - A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would ...
A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.
Scope: local
bookworm: resolved (fixed in 2:6.1.6.1+dfsg-1)
bullseye: resolved (fixed in 2:6.0.3.7+dfsg-2+deb11u1)
forky: resolved (fixed in 2:6.1.6.1+dfsg-1)
sid: resolved (fixed in 2:6.1.6.1+dfsg-1)
trixie: resolved (fixed in 2:6.1.6.1+dfsg-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://discuss.rubyonrails.org/t/cve-2022-27777-possible-xss-vulnerability-in-action-view-tag-helpers/80534https://lists.debian.org/debian-lts-announce/2022/09/msg00002.htmlhttps://www.debian.org/security/2023/dsa-5372https://discuss.rubyonrails.org/t/cve-2022-27777-possible-xss-vulnerability-in-action-view-tag-helpers/80534https://lists.debian.org/debian-lts-announce/2022/09/msg00002.htmlhttps://www.debian.org/security/2023/dsa-5372
2022-05-26
Published