CVE-2024-32464
1 advisory.
RubyGems/actiontext CVE-2024-32464: medium 6.1, EPSS 0.43%
ActionText ContentAttachment can Contain Unsanitized HTML
Action: Upgrade actiontext to 7.1.3.4 or later.
bundle update actiontextAffected
| introduced | fixed | last affected |
|---|---|---|
| 7.1.0 | 7.1.3.4 | - |
| 7.2.0.beta1 | 7.2.0.beta2 | - |
Fixed versions
| 7.1.3.4 | 7.2.0.beta2 |
Sources
- osv: GHSA-prjp-h48f-jgf6
- https://github.com/rails/rails/security/advisories/GHSA-prjp-h48f-jgf6
- https://nvd.nist.gov/vuln/detail/CVE-2024-32464
- https://github.com/rails/rails/commit/e215bf3360e6dfe1497c1503a495e384ed6b0995
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actiontext/CVE-2024-32464.yml
CVE-2024-32464 · published · modified · JSON