CVE-2024-22048

{"id": "CVE-2024-22048", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2024-01-04T21:15:09.940", "references": [{"url": "https://github.com/advisories/GHSA-x2xw-hw8g-6773", "tags": ["Patch", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/alphagov/tech-docs-gem/pull/323", "tags": ["Patch", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1", "tags": ["Patch", "Release Notes"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773", "tags": ["Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773", "tags": ["Patch", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/advisories/GHSA-x2xw-hw8g-6773", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/alphagov/tech-docs-gem/pull/323", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1", "tags": ["Patch", "Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773", "tags": ["Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-79"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.\n\n"}, {"lang": "es", "value": "Las versiones de govuk_tech_docs desde la 2.0.2 hasta la 3.3.1 anteriores son afectados por una vulnerabilidad de cross site scripting. Se puede ejecutar JavaScript malicioso en el navegador del usuario si se muestra un resultado de b\u00fasqueda malicioso en la p\u00e1gina de b\u00fasqueda."}], "lastModified": "2025-06-04T22:15:24.567", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gov.uk:govuk_tech_docs:*:*:*:*:*:ruby:*:*", "vulnerable": true, "matchCriteriaId": "6D17958B-199F-4DC7-B7A3-2A1D07C4BDA7", "versionEndExcluding": "3.3.1", "versionStartIncluding": "2.0.2"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}