Cross-site scripting in actionpack - CVE-2022-27777

Vulnerability identifier: #VU68961

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2022-27777

CWE-ID: CWE-79

Exploitation vector: Remote access

Exploit availability: No public exploit available

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data within the Action View tag helpers. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

actionpack
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Availability Extension 15
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Server 15 SP1 Business Critical Linux
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server 15 SP2 Business Critical Linux
SUSE Linux Enterprise Server 15 SP3 Business Critical Linux
openSUSE Leap
ruby2.1-rubygem-activesupport-4_2
ruby2.1-rubygem-actionview-4_2
ruby2.5-rubygem-actionview-5_1
ruby2.5-rubygem-actionview-doc-5_1
ruby2.5-rubygem-activesupport-5_1
ruby2.5-rubygem-activesupport-doc-5_1
Red Hat Satellite

Install updates from vendor's website.

actionpack - addressed in versions 5.2.7.1, 6.0.4.8, 6.1.5.1, 7.0.2.4
ruby2.1-rubygem-activesupport-4_2 - update to 4.2.9-7.12.1
ruby2.1-rubygem-actionview-4_2 - update to 4.2.9-9.15.1
ruby2.5-rubygem-actionview-5_1 - update to 5.1.4-150000.3.6.1
ruby2.5-rubygem-actionview-doc-5_1 - update to 5.1.4-150000.3.6.1
ruby2.5-rubygem-activesupport-5_1 - update to 5.1.4-150000.3.9.1
ruby2.5-rubygem-activesupport-doc-5_1 - update to 5.1.4-150000.3.9.1
Red Hat Satellite - update to 6.13

• https://discuss.rubyonrails.org/t/cve-2022-27777-possible-xss-vulnerability-in-action-view-tag-helpers/80534

• XSS in Ruby actionpack
• SUSE update for rubygem-activesupport-5_1
• SUSE update for rubygem-actionview-4_2
• SUSE update for rubygem-actionview-5_1
• Multiple vulnerabilities in Red Hat Satellite 6.13