CVE-2024-32464
Fixed upstream EPSS <1%CVSS 6.1
Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2.
Products: rails
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | actiontext | 7.1.3.4 |
| RubyGems | actiontext | 7.2.0.beta2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 24.04 LTS | rails | no fix |
| Ubuntu 25.10 | rails | no fix |
| Ubuntu 26.04 LTS | rails | no fix |
| Ubuntu 26.10 | rails | no fix |
| Ubuntu Pro 16.04 LTS | rails | no fix |
| Ubuntu Pro 18.04 LTS | rails | no fix |
| Ubuntu Pro 20.04 LTS | rails | no fix |
| Ubuntu Pro 22.04 LTS | rails | no fix |