H1-1805893 — Vulnetix

H1-1805893 PUBLISHED

CVE-2022-23520: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations)

Exploit Intelligence

CVE-2022-23520: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations) (hackerone)
CVE-2022-23520: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations) (hackerone)
.bundler-audit.yml (github-poc)

Timeline

Jan 4, 2023 CVE Published
Jan 4, 2023 PoC Published

References

CVE-2022-23520: Incomplete fix for CVE-2022-32209 (XSS in Rails::Html::Sanitizer under certain configurations) advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›