Поиск уязвимостей
Количество 7
Количество 7
CVE-2023-23913
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.
CVE-2023-23913
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.
CVE-2023-23913
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.
CVE-2023-23913
There is a potential DOM based cross-site scripting issue in rails-ujs ...
SUSE-SU-2023:3813-1
Security update for rubygem-actionview-5_1
GHSA-xp5h-f8jf-rc8q
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements
ALT-PU-2024-7877
ALT-PU-2024-7877: package `gem-rails` update to version 6.1.7.7-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-23913 There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute. | CVSS3: 6.3 | 1% Низкий | почти 2 года назад |
 | CVE-2023-23913 There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-23913 There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute. | CVSS3: 6.3 | 1% Низкий | почти 2 года назад |
| CVE-2023-23913 There is a potential DOM based cross-site scripting issue in rails-ujs ... | CVSS3: 6.3 | 1% Низкий | почти 2 года назад |
 | SUSE-SU-2023:3813-1 Security update for rubygem-actionview-5_1 | 1% Низкий | около 3 лет назад | |
| GHSA-xp5h-f8jf-rc8q rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements | CVSS3: 6.3 | 1% Низкий | больше 3 лет назад |
| ALT-PU-2024-7877 ALT-PU-2024-7877: package `gem-rails` update to version 6.1.7.7-alt1 | CVSS3: 6.3 | больше 2 лет назад |
Уязвимостей на страницу