Debian 10 Buster: DLA-3093-1 Moderate Rails Code Injection and XSS

debian lts

September 3, 2022

The following vulnerabilities have been discovered in rails, a ruby based MVC frame work for web development

Topics Covered

security advisory moderate debian threat xss code injection rails

Summary

CVE-2022-21831

A code injection vulnerability exists in the Active Storage that
could allow an attacker to execute code via image_processing
arguments.

CVE-2022-22577

An XSS Vulnerability in Action Pack that could allow an attacker
to bypass CSP for non HTML like responses.

CVE-2022-23633

Action Pack is a framework for handling and responding to web
requests. Under certain circumstances response bodies will not be
closed. In the event a response is *not* notified of a `close`,
`ActionDispatch::Executor` will not know to reset thread local
state for the next request. This can lead to data being leaked to
subsequent requests.

CVE-2022-27777

A XSS Vulnerability in Action View tag helpers which would allow
an attacker to inject content if able to control input into
specific attributes.

CVE-2022-32224

When serialized columns that use YAML (the default) are
deserialized, Rails uses YAML.unsafe_load to convert the YAML data