All vulnerabilities

Servers and applications

CVE-2024-32464

ActionText ContentAttachment can contain unsanitized HTML

Severity
Medium
Published
4 Jun 2024
Last changed
4 Jun 2024
Added to UpHeron
3 Nov 2026
Fixed in
7.1.3.4
Also known as
GHSA-prjp-h48f-jgf6
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Ruby on RailsServers and applications · github:rails/rails
  • From 7.1.0 before 7.1.3.4

References