6.1

CVE-2022-27777: debian debian_linux

Modified
AliasesSUSE-SU-2022:3621-1SUSE-SU-2022:3860-1UBUNTU-CVE-2022-27777
Published 26-05-2022Last modified 03-08-2024

Vulnerability summary

CVE-2022-27777 is a medium (CVSS 6.1) vulnerability in debian debian_linux. EPSS estimates a 1.67% chance of exploitation in the next 30 days, higher than 76.7% of scored vulnerabilities. 1 public exploit is recorded.

Priority
Routine

Not severe (CVSS 6.1, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
6.1/10
010
Medium · v3.1 (NVD)
EPSS score
1.67%
0%100%
Low · +0.03 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 4 · Related 1
DLA-3093-1DSA-5372-1RHSA-2023:2097SUSE-SU-2023:2059-1

Timeline

  1. 26-05-2022
    PublishedVulnerability first disclosed.
  2. 03-08-2024
    Last modifiedVulnerability information updated.

Description

A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

1.67%

Chance of exploitation in the next 30 days

Percentile

77%

Versus all other CVEs

30-day change

Increase +0.03 pp

From 1.64% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (discuss.rubyonrails.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Suse9 products
  • rubygem-actionview-4_2&distro=SUSE OpenStack Cloud Crowbar 8< 4.2.9-9.15.1
  • rubygem-actionview-4_2&distro=SUSE OpenStack Cloud Crowbar 9< 4.2.9-9.15.1
  • rubygem-activesupport-4_2&distro=SUSE OpenStack Cloud Crowbar 8< 4.2.9-7.12.1
  • rubygem-activesupport-4_2&distro=SUSE OpenStack Cloud Crowbar 9< 4.2.9-7.12.1
  • rubygem-activesupport-5_1&distro=SUSE Linux Enterprise High Availability Extension 15< 5.1.4-150000.3.9.1
Debian2 products
Opensuse2 products
  • rubygem-activesupport-5_1&distro=openSUSE Leap 15.3< 5.1.4-150000.3.9.1
  • rubygem-activesupport-5_1&distro=openSUSE Leap 15.4< 5.1.4-150000.3.9.1
Ubuntu2 products
  • railsAll versions (No fix recorded)
  • redmineAll versions (No fix recorded)
RubyGems1 product
  • actionview< 5.2.7.1 | ≥ 6.0.0, < 6.0.4.8 | ≥ 6.1.0, < 6.1.5.1 | ≥ 7.0.0, < 7.0.2.4
Rubyonrails1 product
  • actionpack< 5.2.7.1 | ≥ 6.0.0, < 6.0.4.8 | ≥ 6.1.0, < 6.1.5.1 | ≥ 7.0.0, < 7.0.2.4

6 vendors · 17 products

References

16 links
Show all 16 references