Non évaluée
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the...
CVE-2023-23913
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-23913 rails Corrigé dans: 2:6.0.3.7+dfsg-2+deb11u2
- Ubuntu UBUNTU-CVE-2023-23913 rails
Description d'origine La description telle que publiée par la source (souvent en anglais).
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory debian.org
- patch github.com
- web bugs.debian.org
- web discuss.rubyonrails.org