Duplicate Advisory: govuk_tech_docs vulnerable to unescaped HTML on search results page
Date: 2024-01
Affected: rubygems/govuk_tech_docs
Attack vector: xss
Category: vulnerability-disclosure
Severity: Low
CVE: CVE-2024-22048
CWE: CWE-79
CWE-80

### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x2xw-hw8g-6773. This link is maintained to preserve external references. ### Original Description versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.


Mitigations:

Architectural layers (MAESTRO):