CVE:CVE-2022-32209
CNNVD:CNNVD-202206-2468
Rails是Rails团队的一套基于Ruby语言的开源Web应用框架。
Rails 存在安全漏洞，攻击者利用该漏洞可以绕过 Rails::Html::SafeListSanitizer 过滤并执行 XSS 攻击。
solution:Upgrade rubyonrails rails_html_sanitizers to a higher version than 1.4.3,and avoid the version (,1.4.3); Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0