SUSE-SU-2022:3621-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2022-27777
Published: 18 Oct 2022, 12:54
Last modified:04 Feb 2026, 02:55

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Oct 2022, 12:54
Published
Vulnerability first disclosed
04 Feb 2026, 02:55
Last Modified
Vulnerability information updated

Description

Security update for rubygem-activesupport-5_1 This update for rubygem-activesupport-5_1 fixes the following issues: - CVE-2022-27777: Fixed cross-site scripting vulnerability in Action View tag helper (bsc#1199060).

Affected Systems

  • opensuse•rubygem-activesupport-5_1&distro=openSUSE Leap 15.3

    < 5.1.4-150000.3.9.1

  • opensuse•rubygem-activesupport-5_1&distro=openSUSE Leap 15.4

    < 5.1.4-150000.3.9.1

  • suse•rubygem-activesupport-5_1&distro=SUSE Linux Enterprise High Availability Extension 15

    < 5.1.4-150000.3.9.1

  • suse•rubygem-activesupport-5_1&distro=SUSE Linux Enterprise High Availability Extension 15 SP1

    < 5.1.4-150000.3.9.1

  • suse•rubygem-activesupport-5_1&distro=SUSE Linux Enterprise High Availability Extension 15 SP2

    < 5.1.4-150000.3.9.1

  • suse•rubygem-activesupport-5_1&distro=SUSE Linux Enterprise High Availability Extension 15 SP3

    < 5.1.4-150000.3.9.1

  • suse•rubygem-activesupport-5_1&distro=SUSE Linux Enterprise High Availability Extension 15 SP4

    < 5.1.4-150000.3.9.1

References (3)