CVE-2022-22577
Assigner: hackerone
Published: 2022-05-26T00:00:00
State: PUBLISHED
descriptions: value: An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.
affected: vendor: n/a
product: https://github.com/rails/rails
versions: version: 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1
status: affected
problemTypes: descriptions: type: CWE
description: Cross-site Scripting (XSS) - Stored (CWE-79)
cweId: CWE-79