cve.bz

CVE-2022-27777

6.1 mediumEPSS 1.7%

Medium (6.1). EPSS 1.7% chance of exploitation in the next 30 days. Fixed in actionview 5.2.7.1, 6.0.4.8, 6.1.5.1.

A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.

Severity

CVSS 3.1

6.1 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE
CWE-79
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-ch3h-j2vf-95pvRubyGemsactionview<5.2.7.15.2.7.1
GHSA-ch3h-j2vf-95pvRubyGemsactionview>=6.0.0 <6.0.4.86.0.4.8
GHSA-ch3h-j2vf-95pvRubyGemsactionview>=6.1.0 <6.1.5.16.1.5.1
GHSA-ch3h-j2vf-95pvRubyGemsactionview>=7.0.0 <7.0.2.47.0.2.4

References

Check your stackJSON