CVE-2024-26143 - OpenCVE

Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like translate, or t on a controller, with a key ending in "_html", a :default key which contains untrusted user input, and the resulting string is used in a view, may be susceptible to an XSS vulnerability. The vulnerability is fixed in 7.1.3.1 and 7.0.8.1.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947
https://github.com/advisories/GHSA-9822-6m93-xqf4
https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc
https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e
https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml
https://nvd.nist.gov/vuln/detail/CVE-2024-26143
https://security.netapp.com/advisory/ntap-20240510-0004/
https://www.cve.org/CVERecord?id=CVE-2024-26143

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-02-27T15:33:54.643Z

Updated: 2024-08-01T23:59:32.584Z

Reserved: 2024-02-14T17:40:03.688Z

Link: CVE-2024-26143

Vulnrichment

Updated: 2024-05-23T19:01:14.091Z

NVD

Status : Awaiting Analysis

Published: 2024-02-27T16:15:46.800

Modified: 2024-06-10T17:16:22.560

Link: CVE-2024-26143

Redhat

Severity : Low

Publid Date: 2024-02-24T00:00:00Z

Links: CVE-2024-26143 - Bugzilla

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-26143", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-02-14T17:40:03.688Z", "datePublished": "2024-02-27T15:33:54.643Z", "dateUpdated": "2024-08-01T23:59:32.584Z"}, "containers": {"cna": {"title": "Rails Possible XSS Vulnerability in Action Controller", "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "lang": "en", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4"}, {"name": "https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc", "tags": ["x_refsource_MISC"], "url": "https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc"}, {"name": "https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e", "tags": ["x_refsource_MISC"], "url": "https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e"}, {"name": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947", "tags": ["x_refsource_MISC"], "url": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947"}, {"name": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml", "tags": ["x_refsource_MISC"], "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml"}, {"url": "https://security.netapp.com/advisory/ntap-20240510-0004/"}], "affected": [{"vendor": "rails", "product": "rails", "versions": [{"version": ">= 7.0.0, < 7.0.8.1", "status": "affected"}, {"version": ">= 7.1.0, < 7.1.3.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-02-28T15:48:59.407Z"}, "descriptions": [{"lang": "en", "value": "Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like translate, or t on a controller, with a key ending in \"_html\", a :default key which contains untrusted user input, and the resulting string is used in a view, may be susceptible to an XSS vulnerability. The vulnerability is fixed in 7.1.3.1 and 7.0.8.1."}], "source": {"advisory": "GHSA-9822-6m93-xqf4", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26143", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-29T18:24:49.795683Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:49:16.767Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:59:32.584Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4"}, {"name": "https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc"}, {"name": "https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e"}, {"name": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947"}, {"name": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml"}, {"url": "https://security.netapp.com/advisory/ntap-20240510-0004/", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-26143", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-02-14T17:40:03.688Z", "datePublished": "2024-02-27T15:33:54.643Z", "dateUpdated": "2024-02-28T15:48:59.407Z"}, "containers": {"cna": {"title": "Rails Possible XSS Vulnerability in Action Controller", "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "lang": "en", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4"}, {"name": "https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc", "tags": ["x_refsource_MISC"], "url": "https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc"}, {"name": "https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e", "tags": ["x_refsource_MISC"], "url": "https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e"}, {"name": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947", "tags": ["x_refsource_MISC"], "url": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947"}, {"name": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml", "tags": ["x_refsource_MISC"], "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml"}, {"url": "https://security.netapp.com/advisory/ntap-20240510-0004/"}], "affected": [{"vendor": "rails", "product": "rails", "versions": [{"version": ">= 7.0.0, < 7.0.8.1", "status": "affected"}, {"version": ">= 7.1.0, < 7.1.3.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-02-28T15:48:59.407Z"}, "descriptions": [{"lang": "en", "value": "Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like translate, or t on a controller, with a key ending in \"_html\", a :default key which contains untrusted user input, and the resulting string is used in a view, may be susceptible to an XSS vulnerability. The vulnerability is fixed in 7.1.3.1 and 7.0.8.1."}], "source": {"advisory": "GHSA-9822-6m93-xqf4", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26143", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-29T18:24:49.795683Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:14.091Z"}, "title": "CISA ADP Vulnrichment"}]}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like translate, or t on a controller, with a key ending in \"_html\", a :default key which contains untrusted user input, and the resulting string is used in a view, may be susceptible to an XSS vulnerability. The vulnerability is fixed in 7.1.3.1 and 7.0.8.1."}, {"lang": "es", "value": "Rails es un framework de aplicaci\u00f3n web. Existe una posible vulnerabilidad XSS al utilizar los ayudantes de traducci\u00f3n en Action Controller. Las aplicaciones que utilizan m\u00e9todos de traducci\u00f3n como traducir o t en un controlador, con una clave que termina en \"_html\", una clave :default que contiene entradas de usuario que no son de confianza y la cadena resultante se usa en una vista, pueden ser susceptibles a una vulnerabilidad XSS. La vulnerabilidad se solucion\u00f3 en 7.1.3.1 y 7.0.8.1."}], "id": "CVE-2024-26143", "lastModified": "2024-06-10T17:16:22.560", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2024-02-27T16:15:46.800", "references": [{"source": "security-advisories@github.com", "url": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947"}, {"source": "security-advisories@github.com", "url": "https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc"}, {"source": "security-advisories@github.com", "url": "https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e"}, {"source": "security-advisories@github.com", "url": "https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4"}, {"source": "security-advisories@github.com", "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml"}, {"source": "security-advisories@github.com", "url": "https://security.netapp.com/advisory/ntap-20240510-0004/"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security-advisories@github.com", "type": "Secondary"}]}