Detections
Analytics

SCA: security update for rails-html-sanitizer (GHSA-pg8v-g4xq-hww9)

medium Tenable Cloud Security Plugin ID 417507

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - # Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain
 configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier
 CVE-2022-32209.Versions Affected: ALLNot affected: NONEFixed Versions: v1.4.3## ImpactA possible XSS
 vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject
 content if the application developer has overridden the sanitizer's allowed tags to allow both `select`
 and `style` elements.Code is only impacted if allowed tags are being overridden. This may be done via
 application configuration:```ruby# In config/application.rbconfig.action_view.sanitized_allowed_tags =
 ["select", "style"]```see https://guides.rubyonrails.org/configuring.html#configuring-action-viewOr it may
 be done with a `:tags` option to the Action View helper `sanitize`:```<%= sanitize @comment.body, tags:
 ["select", "style"] %>```see
 https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitizeOr it may be
 done with Rails::Html::SafeListSanitizer directly:```ruby# class-level
 optionRails::Html::SafeListSanitizer.allowed_tags = ["select", "style"]```or```ruby# instance-level
 optionRails::Html::SafeListSanitizer.new.sanitize(@article.body, tags: ["select", "style"])```All users
 overriding the allowed tags by any of the above mechanisms to include both "select" and "style" should
 either upgrade or use one of the workarounds immediately.## ReleasesThe FIXED releases are available at
 the normal locations.## WorkaroundsRemove either `select` or `style` from the overridden allowed tags.##
 CreditsThis vulnerability was responsibly reported by
 [windshock](https://hackerone.com/windshock?type=user). (CVE-2022-32209)

See Also

https://github.com/advisories/GHSA-pg8v-g4xq-hww9

Plugin Details

Severity: Medium

ID: 417507

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 2.3

Percentile: 9.5

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.4

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2022-32209

CVSS v3

Risk Factor: Medium

Base Score: 6.1

Temporal Score: 5.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/25/2022

Vulnerability Publication Date: 6/24/2022

Reference Information

CVE: CVE-2022-32209

cwe: CWE-79