CVE-2022-22577: Debian Linux

Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days.

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

Affected products

• Debian Debian Linux: version 10.0 only
• Rubyonrails Actionpack: from 5.2.0, before 5.2.7.1 (fixed in 5.2.7.1); from 6.0.0, before 6.0.4.8 (fixed in 6.0.4.8); from 6.1.0, before 6.1.5.1 (fixed in 6.1.5.1); from 7.0.0, before 7.0.2.4 (fixed in 7.0.2.4)

Published 2022-05-26. Last modified 2026-06-17.