CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2022-23518
Medium (6.1). EPSS 0.9% chance of exploitation in the next 30 days. Fixed in rails-html-sanitizer 1.4.4.
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions >= 1.0.3, < 1.4.4 are vulnerable to cross-site scripting via data URIs when used in combination with Loofah >= 2.1.0. This issue is patched in version 1.4.4.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- loofah_project:loofah
- rubyonrails:rails_html_sanitizers
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mcvf-2q2m-x72m | RubyGems | rails-html-sanitizer | >=1.0.3 <1.4.4 | 1.4.4 |
References
- https://github.com/rails/rails-html-sanitizer/issues/135
- https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m
- https://hackerone.com/reports/1694173
- https://lists.debian.org/debian-lts-announce/2023/09/msg00012.html
- https://github.com/rails/rails-html-sanitizer/issues/135