Skip to content

Commit ee6d09a

Browse files
committed
Sync with GitHub Security Advisories
* Add CVSSv3 score for several advisories
1 parent 398654c commit ee6d09a

File tree

2 files changed

+11
-9
lines changed

2 files changed

+11
-9
lines changed

gems/rails-html-sanitizer/CVE-2022-23519.yml

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ gem: rails-html-sanitizer
33
cve: 2022-23519
44
ghsa: 9h9g-93gc-623h
55
url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h
6-
title: "Possible XSS vulnerability with certain configurations of rails-html-sanitizer"
6+
title: Possible XSS vulnerability with certain configurations of rails-html-sanitizer
77
date: 2022-12-13
88
description: |
99
## Summary
@@ -67,9 +67,10 @@ description: |
6767
## Workarounds
6868
6969
Remove "style" from the overridden allowed tags, or remove "math" and "svg" from the overridden allowed tags.
70+
cvss_v3: 6.1
7071
patched_versions:
71-
- ">= 1.4.4"
72+
- ">= 1.4.4"
7273
related:
7374
url:
74-
- https://cwe.mitre.org/data/definitions/79.html
75-
- https://hackerone.com/reports/1656627
75+
- https://cwe.mitre.org/data/definitions/79.html
76+
- https://hackerone.com/reports/1656627

gems/rails-html-sanitizer/CVE-2022-23520.yml

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ gem: rails-html-sanitizer
33
cve: 2022-23520
44
ghsa: rrfc-7g8p-99q8
55
url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8
6-
title: "Possible XSS vulnerability with certain configurations of rails-html-sanitizer"
6+
title: Possible XSS vulnerability with certain configurations of rails-html-sanitizer
77
date: 2022-12-13
88
description: |
99
## Summary
@@ -46,11 +46,12 @@ description: |
4646
## Workarounds
4747
4848
Remove either "select" or "style" from the overridden allowed tags.
49+
cvss_v3: 6.1
4950
patched_versions:
50-
- ">= 1.4.4"
51+
- ">= 1.4.4"
5152
related:
5253
cve:
53-
- 2022-32209
54+
- 2022-32209
5455
url:
55-
- https://cwe.mitre.org/data/definitions/79.html
56-
- https://hackerone.com/reports/1654310
56+
- https://cwe.mitre.org/data/definitions/79.html
57+
- https://hackerone.com/reports/1654310

0 commit comments

Comments
 (0)