~/products/rails/rails-ujs

pipeline liveDigest Docs

Rails Rails-Ujs vulnerabilities

1 known vulnerability affecting rails/rails-ujs.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2023-23913P4MEDIUMCVSS 6.3≥ 6.1.7.3, < 6.1.7.3≥ 7.0.4.3, < 7.0.4.32025-01-09

CVE-2023-23913 [MEDIUM] CWE-79 CVE-2023-23913: There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.