摘要:
Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2.
安全等级: Low
公告ID: KylinSec-SA-2024-2872
发布日期: 2024年6月25日
关联CVE: CVE-2024-32464
Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2024-32464 | KY3.4-5 | rubygem-rails | Unaffected |
| CVE-2024-32464 | KY3.5.2 | rubygem-rails | Unaffected |
| CVE-2024-32464 | V6 | rubygem-rails | Unaffected |
