CVE-2022-32209Cross-site Scripting in Rails Rails-html-sanitizer

CWE-79Cross-site Scripting15 documents6 sources
Severity
6.1MEDIUMNVD
EPSS
4.6%
top 10.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 24
Latest updateJan 4

Description

# Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier CVE-2022-32209.Versions Affected: ALLNot affected: NONEFixed Versions: v1.4.3## ImpactA possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both `s

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages5 packages

CVEListV5rails/rails-html-sanitizer< 1.4.4
RubyGemsrails/rails-html-sanitizer< 1.4.3+1
debiandebian/ruby-rails-html-sanitizer< ruby-rails-html-sanitizer 1.4.4-1 (bookworm)+1

Also affects: Debian Linux 10.0, Fedora 35, 36

🔴Vulnerability Details

6
OSV
CVE-2022-23520: rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications2022-12-14
OSV
Possible XSS vulnerability with certain configurations of rails-html-sanitizer2022-12-13
GHSA
Possible XSS vulnerability with certain configurations of rails-html-sanitizer2022-12-13
GHSA
Rails::Html::Sanitizer vulnerable to Cross-site Scripting2022-06-25
OSV
Rails::Html::Sanitizer vulnerable to Cross-site Scripting2022-06-25

📋Vendor Advisories

4
Red Hat
rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations2022-12-13
Red Hat
rubygem-rails-html-sanitizer: possible xss with certain configurations2022-06-24
Debian
CVE-2022-23520: ruby-rails-html-sanitizer - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails appli...2022
Debian
CVE-2022-32209: ruby-rails-html-sanitizer - # Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vu...2022

💬Community

3
HackerOne
CVE-2022-23520: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)2023-01-04
HackerOne
Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)2022-12-14
HackerOne
Rails::Html::SafeListSanitizer vulnerable to xss attack in an environment that allows the style tag2022-06-27